Sep 15 03:31:35 nativespace-cdp sshd[2107327]: Connection closed by 159.100.136.21 port 36568 [preauth]
Sep 15 03:36:35 nativespace-cdp sshd[2108397]: Connection closed by 159.100.136.21 port 46382 [preauth]
Sep 15 03:41:35 nativespace-cdp sshd[2109656]: Connection closed by 159.100.136.21 port 55638 [preauth]
Sep 15 03:46:33 nativespace-cdp sshd[2110776]: Connection closed by 159.100.136.21 port 37132 [preauth]
Sep 15 03:51:33 nativespace-cdp sshd[2112236]: Connection closed by 159.100.136.21 port 45872 [preauth]
Sep 15 03:56:36 nativespace-cdp sshd[2113254]: Connection closed by 159.100.136.21 port 55242 [preauth]
Sep 15 03:59:53 nativespace-cdp sshd[2113837]: Bad protocol version identification '\003' from 45.227.254.49 port 65476
Sep 15 04:01:33 nativespace-cdp sshd[2114870]: Connection closed by 159.100.136.21 port 35688 [preauth]
Sep 15 04:06:33 nativespace-cdp sshd[2115853]: Connection closed by 159.100.136.21 port 45050 [preauth]
Sep 15 04:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 04:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:20 nativespace-cdp sudo[2116305]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 04:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:20 nativespace-cdp sudo[2116309]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 04:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:21 nativespace-cdp sudo[2116312]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 04:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:21 nativespace-cdp sudo[2116316]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 04:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116319]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116329]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116332]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116335]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116338]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116341]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 04:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:23 nativespace-cdp sudo[2116344]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 04:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:25 nativespace-cdp sudo[2116352]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 04:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:25 nativespace-cdp sudo[2116356]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=spectrum user-3=theblack user-4=hodgesonweb user-5=still user-6=agproduc user-7=stephani user-8=leereyn1 user-9=foundation user-10=booff user-11=markward user-12=athenare user-13=connect9 user-14=vantagep user-15=maflemin user-16=lbscrmod user-17=ulsukarm user-18=martsblo user-19=dickemery123 user-20=ptkxhsbt user-21=lbhyisi user-22=hhdugcor user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=strathar user-27=sarafoundation user-28=atestord user-29=wilsonsw user-30=musorguk user-31=megacards user-32=milloyco user-33=gilpin user-34=elecleis user-35=putterfi user-36=hubmaster user-37=carsinyo user-38=fetch user-39=accooper user-40=ianrayne user-41=connectedshoppin user-42=thqkgnbz user-43=jonhartl user-44=seftvta user-45=ultbcrra user-46=firstres user-47=coursemc
Sep 15 04:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=clarkass user-50=firstrel user-51=costestimatorco user-52=firstred user-53=southlon user-54=highlegh user-55=alexadmin user-56=skyfirec user-57=innovat1 user-58=askhform user-59=stuartge user-60=nativene user-61=brighto1 user-62=nstriton user-63=firstre2 user-64=vivienn1 user-65=battlere user-66=oneoarco user-67=bedfords user-68=belle user-69=ggaaorgu user-70=newstoda user-71=bemadonn user-72=burydropin user-73=fawcettd user-74=nsceres user-75=beauty user-76=eatspam user-77=darkstar user-78=dhyana user-79=sibtoncc user-80=asandcoc user-81=bwppodcast user-82=zebrapho user-83=steve user-84=cambria1 user-85=cathski user-86=reliable user-87=ninejimm user-88=pugwash user-89=paulmca1 user-90=howardon user-91=cwsocial user-92=hirefootballgame user-93=eugincou user-94=courseme user-95=putterfc user-96=nscdp user-97=health2045 user-98=fortunaz user-99=leftie user-100=foods user-101=lkpier
Sep 15 04:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=philmcph user-103=ctedorgu user-104=firstre5 user-105=steakbridieme user-106=donnychicago user-107=smrszyqg user-108=isleofwi user-109=hidden user-110=nomistakes user-111=barbersh user-112=tigerlet user-113=attlebor user-114=lucy user-115=onlycont user-116=ranxterc user-117=outdoorc user-118=hodgsonmail user-119=branko user-120=romaldki user-121=tomandle user-122=jennimil user-123=chrisdal user-124=mcdermos user-125=nbhavers user-126=careers user-127=david user-128=tstardom user-129=oubpgvbx user-130=what user-131=sketchy user-132=cath user-133=havantho user-134=nvihkvu user-135=ladburyp user-136=dancinggardener user-137=stagingerris user-138=kategilpin user-139=design user-140=nove user-141=boldover user-142=bakery user-143=sosevalu user-144=crrtipdl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 04:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 04:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:26 nativespace-cdp sudo[2116361]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 04:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:27 nativespace-cdp sudo[2116370]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rX34JKkMxa91c1rp.~
Sep 15 04:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:27 nativespace-cdp sudo[2116374]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rX34JKkMxa91c1rp.~'
Sep 15 04:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:27 nativespace-cdp sudo[2116377]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rX34JKkMxa91c1rp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 04:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:27 nativespace-cdp sudo[2116381]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 04:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:27 nativespace-cdp sudo[2116385]: pam_unix(sudo:session): session closed for user root
Sep 15 04:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 04:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:09:29 nativespace-cdp sudo[2116412]: pam_unix(sudo:session): session closed for user root
Sep 15 04:11:34 nativespace-cdp sshd[2117192]: Connection closed by 159.100.136.21 port 53996 [preauth]
Sep 15 04:16:33 nativespace-cdp sshd[2118301]: Connection closed by 159.100.136.21 port 35470 [preauth]
Sep 15 04:21:33 nativespace-cdp sshd[2120139]: Connection closed by 159.100.136.21 port 44292 [preauth]
Sep 15 04:26:33 nativespace-cdp sshd[2121358]: Connection closed by 159.100.136.21 port 53548 [preauth]
Sep 15 04:31:32 nativespace-cdp sshd[2123214]: Connection closed by 159.100.136.21 port 34482 [preauth]
Sep 15 04:36:32 nativespace-cdp sshd[2124588]: Connection closed by 159.100.136.21 port 44334 [preauth]
Sep 15 04:41:34 nativespace-cdp sshd[2127111]: Connection closed by 159.100.136.21 port 53794 [preauth]
Sep 15 04:46:33 nativespace-cdp sshd[2128853]: Connection closed by 159.100.136.21 port 34430 [preauth]
Sep 15 04:51:33 nativespace-cdp sshd[2130023]: Connection closed by 159.100.136.21 port 42620 [preauth]
Sep 15 04:56:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 04:56:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:11 nativespace-cdp sudo[2131090]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 04:56:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:11 nativespace-cdp sudo[2131102]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 04:56:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:15 nativespace-cdp sudo[2131111]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cwsocial user-2=howardon user-3=paulmca1 user-4=pugwash user-5=reliable user-6=ninejimm user-7=cathski user-8=cambria1 user-9=courseme user-10=eugincou user-11=hirefootballgame user-12=firstre5 user-13=donnychicago user-14=steakbridieme user-15=philmcph user-16=ctedorgu user-17=lkpier user-18=foods user-19=leftie user-20=health2045 user-21=fortunaz user-22=nscdp user-23=putterfc user-24=tigerlet user-25=barbersh user-26=nomistakes user-27=hidden user-28=smrszyqg user-29=isleofwi user-30=nsceres user-31=fawcettd user-32=burydropin user-33=dhyana user-34=darkstar user-35=eatspam user-36=beauty user-37=sibtoncc user-38=asandcoc user-39=steve user-40=zebrapho user-41=bwppodcast user-42=nvihkvu user-43=havantho user-44=sketchy user-45=cath user-46=what user-47=tstardom user-48=oubpgvbx user-49=design
Sep 15 04:56:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=kategilpin user-51=dancinggardener user-52=stagingerris user-53=ladburyp user-54=boldover user-55=nove user-56=crrtipdl user-57=sosevalu user-58=bakery user-59=onlycont user-60=lucy user-61=attlebor user-62=romaldki user-63=branko user-64=ranxterc user-65=outdoorc user-66=hodgsonmail user-67=jennimil user-68=tomandle user-69=david user-70=careers user-71=nbhavers user-72=mcdermos user-73=chrisdal user-74=ptkxhsbt user-75=dickemery123 user-76=martsblo user-77=magichat user-78=hhdugcor user-79=lbhyisi user-80=atestord user-81=sarafoundation user-82=strathar user-83=brmrjxl user-84=lakesan1 user-85=megacards user-86=musorguk user-87=wilsonsw user-88=hodgesonweb user-89=theblack user-90=spectrum user-91=jarvisin user-92=leereyn1 user-93=stephani user-94=agproduc user-95=still user-96=lbscrmod user-97=maflemin user-98=vantagep user-99=athenare user-100=connect9 user-101=booff user-102=markward
Sep 15 04:56:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=foundation user-104=ulsukarm user-105=skyfirec user-106=alexadmin user-107=nativene user-108=askhform user-109=stuartge user-110=innovat1 user-111=oneoarco user-112=battlere user-113=vivienn1 user-114=firstre2 user-115=nstriton user-116=brighto1 user-117=bemadonn user-118=newstoda user-119=belle user-120=ggaaorgu user-121=bedfords user-122=fetch user-123=carsinyo user-124=hubmaster user-125=putterfi user-126=elecleis user-127=milloyco user-128=gilpin user-129=thqkgnbz user-130=connectedshoppin user-131=ianrayne user-132=accooper user-133=opaiscyx user-134=coursemc user-135=firstres user-136=ultbcrra user-137=jonhartl user-138=seftvta user-139=highlegh user-140=southlon user-141=firstred user-142=costestimatorco user-143=firstrel user-144=clarkass feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 04:56:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 04:56:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:16 nativespace-cdp sudo[2131116]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 15 04:56:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:17 nativespace-cdp sudo[2131127]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 15 04:56:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:18 nativespace-cdp sudo[2131133]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:33 nativespace-cdp sshd[2131187]: Connection closed by 159.100.136.21 port 51640 [preauth]
Sep 15 04:56:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 15 04:56:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:56:49 nativespace-cdp sudo[2131281]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:56:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 15 04:56:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:50 nativespace-cdp sudo[2131288]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 15 04:56:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:52 nativespace-cdp sudo[2131297]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 15 04:56:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:54 nativespace-cdp sudo[2131305]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 15 04:56:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:54 nativespace-cdp sudo[2131314]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 15 04:56:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:56:57 nativespace-cdp sudo[2131328]: pam_unix(sudo:session): session closed for user root
Sep 15 04:56:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 15 04:56:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:02 nativespace-cdp sudo[2131338]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 15 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:02 nativespace-cdp sudo[2131369]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 15 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:02 nativespace-cdp sudo[2131373]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 15 04:57:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:13 nativespace-cdp sudo[2131460]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:16 nativespace-cdp sudo[2131525]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 15 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 15 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 15 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:17 nativespace-cdp sudo[2131532]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 15 04:57:17 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 15 04:57:17 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 15 04:57:17 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:57:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:18 nativespace-cdp sudo[2131538]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 15 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 15 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 15 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:21 nativespace-cdp sudo[2131545]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:30 nativespace-cdp sudo[2131667]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:30 nativespace-cdp sudo[2131673]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:30 nativespace-cdp sudo[2131679]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 15 04:57:30 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 04:57:30 nativespace-cdp sudo[2131685]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 15 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:32 nativespace-cdp sudo[2131723]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 15 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:32 nativespace-cdp sudo[2131727]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 15 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:57:56 nativespace-cdp sudo[2131899]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 15 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:57 nativespace-cdp sudo[2131906]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 15 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:57 nativespace-cdp sudo[2131910]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 15 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:59 nativespace-cdp sudo[2131915]: pam_unix(sudo:session): session closed for user root
Sep 15 04:57:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 15 04:57:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:57:59 nativespace-cdp sudo[2131922]: pam_unix(sudo:session): session closed for user root
Sep 15 04:58:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 15 04:58:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:58:02 nativespace-cdp sudo[2131940]: pam_unix(sudo:session): session closed for user root
Sep 15 04:58:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 15 04:58:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:58:02 nativespace-cdp sudo[2131960]: pam_unix(sudo:session): session closed for user root
Sep 15 04:58:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 15 04:58:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:58:10 nativespace-cdp sudo[2132126]: pam_unix(sudo:session): session closed for user root
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:58:13 nativespace-cdp sudo[2132185]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:58:13 nativespace-cdp sudo[2132191]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 15 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:58:36 nativespace-cdp sudo[2132197]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:58:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 04:58:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:58:47 nativespace-cdp sudo[2132359]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:58:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:58:47 nativespace-cdp sudo[2132365]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 15 04:58:47 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:58:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 04:58:47 nativespace-cdp sudo[2132371]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 04:58:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 15 04:58:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:58:49 nativespace-cdp sudo[2132405]: pam_unix(sudo:session): session closed for user root
Sep 15 04:58:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 15 04:58:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:58:50 nativespace-cdp sudo[2132410]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 15 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:09 nativespace-cdp sudo[2132524]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 15 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:09 nativespace-cdp sudo[2132530]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 15 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:10 nativespace-cdp sudo[2132534]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 15 04:59:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:10 nativespace-cdp sudo[2132540]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 15 04:59:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:11 nativespace-cdp sudo[2132553]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 15 04:59:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:11 nativespace-cdp sudo[2132559]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 15 04:59:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:21 nativespace-cdp sudo[2132640]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 04:59:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:23 nativespace-cdp sudo[2132695]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 15 04:59:23 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 15 04:59:23 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 15 04:59:23 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:59:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:24 nativespace-cdp sudo[2132701]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 15 04:59:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 15 04:59:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 15 04:59:24 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:59:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:36 nativespace-cdp sudo[2132707]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 15 04:59:36 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 15 04:59:36 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 15 04:59:36 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:59:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:37 nativespace-cdp sudo[2132745]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:43 nativespace-cdp sudo[2132863]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:43 nativespace-cdp sudo[2132869]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 15 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:44 nativespace-cdp sudo[2132875]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 15 04:59:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 15 04:59:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 15 04:59:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 04:59:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 04:59:44 nativespace-cdp sudo[2132881]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 04:59:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 15 04:59:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:46 nativespace-cdp sudo[2132917]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 15 04:59:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:46 nativespace-cdp sudo[2132924]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 15 04:59:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:47 nativespace-cdp sudo[2132938]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 15 04:59:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:47 nativespace-cdp sudo[2132944]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 15 04:59:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 15 04:59:48 nativespace-cdp sudo[2132954]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 15 04:59:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 15 04:59:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:49 nativespace-cdp sudo[2132960]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 15 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:49 nativespace-cdp sudo[2132965]: pam_unix(sudo:session): session closed for user root
Sep 15 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 15 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 04:59:49 nativespace-cdp sudo[2132969]: pam_unix(sudo:session): session closed for user root
Sep 15 05:00:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 15 05:00:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:05 nativespace-cdp sudo[2133209]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 15 05:00:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:00:05 nativespace-cdp sudo[2133217]: pam_unix(sudo:session): session closed for user root
Sep 15 05:00:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 15 05:00:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:00:06 nativespace-cdp sudo[2133227]: pam_unix(sudo:session): session closed for user root
Sep 15 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 15 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:00:07 nativespace-cdp sudo[2133246]: pam_unix(sudo:session): session closed for user root
Sep 15 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 15 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:00:12 nativespace-cdp sudo[2133317]: pam_unix(sudo:session): session closed for user root
Sep 15 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:15 nativespace-cdp sudo[2133381]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 15 05:00:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 15 05:00:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 15 05:00:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:16 nativespace-cdp sudo[2133387]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 15 05:00:16 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 15 05:00:16 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 15 05:00:16 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 05:00:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:31 nativespace-cdp sudo[2133402]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 15 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:40 nativespace-cdp sudo[2133550]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:40 nativespace-cdp sudo[2133556]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 15 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 15 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 05:00:40 nativespace-cdp sudo[2133562]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 05:00:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 15 05:00:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:00:45 nativespace-cdp sudo[2133603]: pam_unix(sudo:session): session closed for user root
Sep 15 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 15 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:00:45 nativespace-cdp sudo[2133615]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 15 05:01:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 15 05:01:00 nativespace-cdp sudo[2133743]: pam_unix(sudo:session): session closed for user fortunaz
Sep 15 05:01:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 15 05:01:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:01 nativespace-cdp sudo[2133754]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 15 05:01:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:01 nativespace-cdp sudo[2133784]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 15 05:01:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:01 nativespace-cdp sudo[2133797]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 15 05:01:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:04 nativespace-cdp sudo[2133860]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 15 05:01:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:04 nativespace-cdp sudo[2133866]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 15 05:01:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:10 nativespace-cdp sudo[2133934]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=cwsocial WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 15 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:21 nativespace-cdp sudo[2134232]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 15 05:01:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:30 nativespace-cdp sudo[2134402]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 15 05:01:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:30 nativespace-cdp sudo[2134405]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 15 05:01:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:30 nativespace-cdp sudo[2134409]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134412]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134415]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134418]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134421]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134424]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134427]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134430]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134433]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134436]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134441]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134444]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134447]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134450]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134457]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134460]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134463]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134466]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134469]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134472]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134475]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134478]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134481]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134484]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134487]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134490]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:31 nativespace-cdp sudo[2134493]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134496]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134499]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134502]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134505]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134508]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134511]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134514]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134517]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134520]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134523]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134526]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134530]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134533]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134536]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134539]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134542]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134545]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134548]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134551]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134554]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134557]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134560]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134563]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134566]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134569]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134572]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134575]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134578]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134581]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134584]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134587]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134590]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134593]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:32 nativespace-cdp sudo[2134596]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134599]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134602]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134605]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134608]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134611]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134614]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134617]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134620]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134623]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134626]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134629]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134633]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134636]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134639]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134642]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134645]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134648]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134651]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134654]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134657]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134660]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134663]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134666]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134669]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134672]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134675]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134678]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134681]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134684]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134687]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134690]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:33 nativespace-cdp sudo[2134695]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134701]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sshd[2134697]: Connection closed by 159.100.136.21 port 60980 [preauth]
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134705]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134708]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134715]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134719]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134722]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134727]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134731]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134734]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134739]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134743]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134746]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134752]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134757]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134760]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134763]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134769]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134772]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134775]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134780]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134786]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134789]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134792]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134797]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134801]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134804]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134808]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134815]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134818]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134821]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134826]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134830]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134833]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134836]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134842]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:34 nativespace-cdp sudo[2134847]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134850]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134854]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134859]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134862]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134866]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134871]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134875]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134878]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134884]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134890]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134895]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134899]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134905]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134911]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134917]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134922]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134926]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134929]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134932]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134938]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134943]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134946]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134950]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134955]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134959]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134962]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134967]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134971]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134974]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134978]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134983]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134986]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134989]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134994]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2134998]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2135001]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2135004]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 15 05:01:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:35 nativespace-cdp sudo[2135011]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135014]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135017]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135023]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135029]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135032]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135036]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135039]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135042]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135045]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135048]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135051]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135056]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135059]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135062]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135065]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135068]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135071]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135074]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135077]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135080]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135083]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135086]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135089]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135092]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135095]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135098]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135101]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135104]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135107]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135110]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135113]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135116]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135119]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135122]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:36 nativespace-cdp sudo[2135125]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135128]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135131]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135134]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135137]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135140]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135143]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135146]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135149]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135152]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135155]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135158]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135161]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135164]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135168]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135171]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135174]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135177]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135181]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135184]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135187]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135190]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/design/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135193]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/aberdeen-guesthouses.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135196]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/aberdeen-guesthouses.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:37 nativespace-cdp sudo[2135199]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/accooper/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:38 nativespace-cdp sudo[2135202]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/agproduc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:38 nativespace-cdp sudo[2135206]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/altrincham -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:38 nativespace-cdp sudo[2135209]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-content
Sep 15 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:38 nativespace-cdp sudo[2135212]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-config.php
Sep 15 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:38 nativespace-cdp sudo[2135215]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/.wp-toolkit-ignore
Sep 15 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:38 nativespace-cdp sudo[2135218]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/amarawetherall.me.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:39 nativespace-cdp sudo[2135221]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/amarawetherall.me.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:39 nativespace-cdp sudo[2135224]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/amcalenan -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135227]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135238]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135241]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135244]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/amcalenan -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135247]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135250]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135253]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:41 nativespace-cdp sudo[2135256]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/thqkgnbz/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:42 nativespace-cdp sudo[2135259]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/wp-content
Sep 15 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:42 nativespace-cdp sudo[2135263]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/wp-config.php
Sep 15 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:42 nativespace-cdp sudo[2135266]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/.wp-toolkit-ignore
Sep 15 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:42 nativespace-cdp sudo[2135269]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/sinclairmanagement -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:42 nativespace-cdp sudo[2135272]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135275]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/wp-content
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135305]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/wp-config.php
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135308]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/.wp-toolkit-ignore
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135311]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/asandcoc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135314]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/wp-content
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135317]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/wp-config.php
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135320]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/.wp-toolkit-ignore
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135323]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/askhform/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:58 nativespace-cdp sudo[2135326]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135329]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/athenars.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135333]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/athenars.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135336]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/attlebor/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135339]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/auchendennanltd.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135342]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/auchendennanltd.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135345]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/backinawhile -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135348]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/backinawhile -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:01:59 nativespace-cdp sudo[2135351]: pam_unix(sudo:session): session closed for user root
Sep 15 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/opaiscyx/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:00 nativespace-cdp sudo[2135354]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bwppodcast/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:04 nativespace-cdp sudo[2135359]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/bargeton.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:04 nativespace-cdp sudo[2135383]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/bargeton.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:04 nativespace-cdp sudo[2135386]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/battlere/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135390]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/wp-content
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135393]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/wp-config.php
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135396]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/.wp-toolkit-ignore
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135399]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bedfords/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135402]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/wp-content
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135409]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/wp-config.php
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135412]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/.wp-toolkit-ignore
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135415]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/belle/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135418]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:05 nativespace-cdp sudo[2135421]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/bhlabour.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135424]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-content
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135440]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-config.php
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135443]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/../wp-config.php
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135446]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-content
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135449]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-config.php
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135452]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/../wp-config.php
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135455]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135459]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-config.php
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135462]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/.wp-toolkit-ignore
Sep 15 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:11 nativespace-cdp sudo[2135465]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/bhlabour.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135468]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-content
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135471]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135474]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/../wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135477]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-content
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135480]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135483]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/../wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135486]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135489]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135492]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/.wp-toolkit-ignore
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135495]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/birmingham -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135498]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-content
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135501]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135504]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/.wp-toolkit-ignore
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135507]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/blackburn -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135510]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-content
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135514]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-config.php
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135517]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/.wp-toolkit-ignore
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:12 nativespace-cdp sudo[2135520]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/BattleofBritain -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135523]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldover-graphic-design.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135526]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135530]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135533]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135537]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldover-graphic-design.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135540]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135543]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135546]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:13 nativespace-cdp sudo[2135549]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:15 nativespace-cdp sudo[2135552]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-content
Sep 15 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:15 nativespace-cdp sudo[2135563]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-config.php
Sep 15 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:15 nativespace-cdp sudo[2135566]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/.wp-toolkit-ignore
Sep 15 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:15 nativespace-cdp sudo[2135570]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135573]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135576]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135579]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldver.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135582]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldver.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135585]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/bolton -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135588]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-content
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135593]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-config.php
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135596]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/.wp-toolkit-ignore
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:16 nativespace-cdp sudo[2135599]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/booff/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:17 nativespace-cdp sudo[2135603]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bramptonabbotts.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:17 nativespace-cdp sudo[2135608]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bramptonabbotts.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:17 nativespace-cdp sudo[2135611]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bridstow-school.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135614]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bridstow-school.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135618]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135621]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brmrjxl/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135624]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/burnley -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135627]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-content
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135631]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-config.php
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135634]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/.wp-toolkit-ignore
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135637]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/burtonupontrent -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135640]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-content
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135643]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-config.php
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135646]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/.wp-toolkit-ignore
Sep 15 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:18 nativespace-cdp sudo[2135649]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/bury -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135652]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-content
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135656]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-config.php
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135659]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/.wp-toolkit-ignore
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135662]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/burydropin/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135665]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cambria1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135668]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/cambridge -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135671]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/candidacanbefun.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135674]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/candidacanbefun.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135677]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/crete/wordpress -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:19 nativespace-cdp sudo[2135680]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/crete/wordpress -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135683]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/catherinejonesart.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135686]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/catherinejonesart.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135689]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135692]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135695]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135698]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135701]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channel-capital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135704]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channel-capital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135707]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135710]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135714]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channelcapital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135717]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channelcapital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135720]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/chorley -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135723]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-content
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135727]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-config.php
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135730]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/.wp-toolkit-ignore
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135734]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/chorleyhandyman.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135739]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/chorleyhandyman.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:20 nativespace-cdp sudo[2135742]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135745]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135751]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135754]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135757]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/christchurchfod.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135760]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/christchurchfod.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135763]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/churchdownclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135766]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/churchdownclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135770]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownmvc.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135773]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownmvc.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135776]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownvillagebowls.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135779]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownvillagebowls.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:21 nativespace-cdp sudo[2135782]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/clark.associates -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:22 nativespace-cdp sudo[2135785]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/clark.associates -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:22 nativespace-cdp sudo[2135788]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135792]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135797]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/clerks -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135800]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/cmvc.skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135803]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/code/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135806]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/colingrieve.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135809]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/colingrieve.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135812]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/connect9/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135815]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/www.coriniumcapital.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135818]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/www.coriniumcapital.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:23 nativespace-cdp sudo[2135821]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/costestimatorco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:30 nativespace-cdp sudo[2135824]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/wp-content
Sep 15 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:30 nativespace-cdp sudo[2135840]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/wp-config.php
Sep 15 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:30 nativespace-cdp sudo[2135843]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/.wp-toolkit-ignore
Sep 15 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:30 nativespace-cdp sudo[2135846]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:30 nativespace-cdp sudo[2135849]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/coventry -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135854]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-content
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135858]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-config.php
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135861]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/.wp-toolkit-ignore
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135865]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ctedorgu/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135868]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/cvs.media -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135872]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/cvs.media -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:31 nativespace-cdp sudo[2135875]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cwsocial/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135879]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-content
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135883]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-config.php
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135886]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/.wp-toolkit-ignore
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135889]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cwsocial/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135892]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-content
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135895]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-config.php
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135898]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/.wp-toolkit-ignore
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:32 nativespace-cdp sudo[2135901]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dancinggardener/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135904]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/wp-content
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135909]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/wp-config.php
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135912]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/.wp-toolkit-ignore
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135915]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/darkstar/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135918]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ddlc.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135921]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ddlc.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:33 nativespace-cdp sudo[2135924]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/derby -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135927]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-content
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135930]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-config.php
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135933]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/.wp-toolkit-ignore
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135936]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/dev.boldover.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135939]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/wp-content
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135946]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/wp-config.php
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135949]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/.wp-toolkit-ignore
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135952]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/dev.brightonhovelabour.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135955]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/devdev -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135958]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/Devon_2012 -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135961]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dhyana/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:34 nativespace-cdp sudo[2135964]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dhyana/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135967]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dickemery123/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135970]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/wp-content
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135976]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/wp-config.php
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135979]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/.wp-toolkit-ignore
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135982]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/disfigurines -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135986]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/disfigurines -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135989]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135992]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135995]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2135998]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:35 nativespace-cdp sudo[2136001]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136005]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136008]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136011]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136014]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/dogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136017]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/dogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136020]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/beauty/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:36 nativespace-cdp sudo[2136023]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/carsinyo/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136026]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/wp-content
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136030]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/wp-config.php
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136033]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/../wp-config.php
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136036]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/../wp-includes
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136039]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-content
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136042]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-config.php
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136045]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/.wp-toolkit-ignore
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136048]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wp-content
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136051]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wp-config.php
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136054]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/.wp-toolkit-ignore
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136057]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/donnychicago/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136060]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/drutopia.co -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136063]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/drybrookband.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136066]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/drybrookband.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136070]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/drybrookband.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136073]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/drybrookband.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:37 nativespace-cdp sudo[2136076]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/dudley -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:38 nativespace-cdp sudo[2136079]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-content
Sep 15 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:38 nativespace-cdp sudo[2136082]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-config.php
Sep 15 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:38 nativespace-cdp sudo[2136085]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/.wp-toolkit-ignore
Sep 15 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:38 nativespace-cdp sudo[2136088]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:39 nativespace-cdp sudo[2136091]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136095]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136098]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/eatspam/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136102]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cathski/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136105]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/eugincou/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136108]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/fallgame.info -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136111]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/fancydresspiratecostumes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136114]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fawcettd/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:40 nativespace-cdp sudo[2136117]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/fellowshipofkilmarnockchurches.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:41 nativespace-cdp sudo[2136121]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/fellowshipofkilmarnockchurches.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:41 nativespace-cdp sudo[2136128]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fetch/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:41 nativespace-cdp sudo[2136132]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136135]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-content
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136164]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-config.php
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136167]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/.wp-toolkit-ignore
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136170]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-content
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136173]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-config.php
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136176]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/.wp-toolkit-ignore
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136179]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-content
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136182]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-config.php
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136185]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/.wp-toolkit-ignore
Sep 15 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:53 nativespace-cdp sudo[2136188]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136191]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136194]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136197]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136200]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136203]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136206]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136209]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136212]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136215]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136218]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136221]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136224]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136227]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136231]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136234]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136237]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136242]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136245]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136248]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136251]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136254]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136257]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136260]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136263]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136266]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136269]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136272]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136275]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136278]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136281]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136284]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136289]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136292]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136295]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136298]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136301]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-content
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136303]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-config.php
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:54 nativespace-cdp sudo[2136307]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/.wp-toolkit-ignore
Sep 15 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136310]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136313]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136316]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136319]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136322]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136325]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136328]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136331]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136334]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136337]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136340]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136343]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136346]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136350]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136353]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136356]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136359]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136362]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136365]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136371]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136374]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136377]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136381]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136384]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136387]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136390]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136393]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136396]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136399]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136402]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136405]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136408]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136411]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136414]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136417]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136420]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/.wp-toolkit-ignore
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136423]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-content
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:55 nativespace-cdp sudo[2136426]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-config.php
Sep 15 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136429]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136432]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136435]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136438]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136442]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136445]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136448]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136452]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136456]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136459]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136462]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136465]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136468]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136472]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136475]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136478]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136481]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136484]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136487]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136491]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136494]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136497]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136502]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136505]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136508]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136511]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136514]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136517]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136520]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136523]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136526]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136529]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136532]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136536]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/.wp-toolkit-ignore
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136539]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-content
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136542]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-config.php
Sep 15 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:56 nativespace-cdp sudo[2136545]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136548]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136551]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136554]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136557]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136560]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136563]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136566]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136569]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136572]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136575]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136578]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136581]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136584]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136587]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136591]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136594]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136597]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136600]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136603]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wp-content
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136606]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wp-config.php
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136609]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/.wp-toolkit-ignore
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136612]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstred/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:02:57 nativespace-cdp sudo[2136615]: pam_unix(sudo:session): session closed for user root
Sep 15 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstres/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:01 nativespace-cdp sudo[2136622]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/wp-content
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136631]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/wp-config.php
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136648]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/.wp-toolkit-ignore
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136653]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstrel/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136656]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre2/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136659]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/wp-content
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136662]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/wp-config.php
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136665]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/.wp-toolkit-ignore
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136668]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/fletcherjackson.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136671]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/fletcherjackson -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136675]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/fletcherjackson.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136678]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136681]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-content
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136684]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-config.php
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136687]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/.wp-toolkit-ignore
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136690]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136693]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136697]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136700]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestedgebenefice.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136703]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestedgebenefice.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:02 nativespace-cdp sudo[2136706]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestrc.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:03 nativespace-cdp sudo[2136709]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestrc.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:03 nativespace-cdp sudo[2136712]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cath/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:03 nativespace-cdp sudo[2136715]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136720]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-content
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136741]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-config.php
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136744]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/.wp-toolkit-ignore
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136747]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136750]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-content
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136753]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-config.php
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136756]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/.wp-toolkit-ignore
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136759]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/gainford-inventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136762]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/gainford-inventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136765]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/getgotdelivered.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136768]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/getgotdelivered.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136771]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136774]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/asandcoc/public_html/global -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136777]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/grantham -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136780]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-content
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136783]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-config.php
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136786]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/.wp-toolkit-ignore
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136790]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/graydimensions.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136793]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/graydimensions.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136796]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/halfanedit -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:07 nativespace-cdp sudo[2136799]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/halifax -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:08 nativespace-cdp sudo[2136802]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-content
Sep 15 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:08 nativespace-cdp sudo[2136805]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-config.php
Sep 15 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:08 nativespace-cdp sudo[2136808]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/.wp-toolkit-ignore
Sep 15 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:08 nativespace-cdp sudo[2136811]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/harryclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:08 nativespace-cdp sudo[2136814]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/harryclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:08 nativespace-cdp sudo[2136817]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/havantho/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:09 nativespace-cdp sudo[2136820]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/health2045/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:09 nativespace-cdp sudo[2136824]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/wp-content
Sep 15 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:09 nativespace-cdp sudo[2136828]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/wp-config.php
Sep 15 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:09 nativespace-cdp sudo[2136831]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/.wp-toolkit-ignore
Sep 15 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:09 nativespace-cdp sudo[2136834]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/hellositex -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:09 nativespace-cdp sudo[2136837]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/hellositex -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:10 nativespace-cdp sudo[2136840]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/help -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:10 nativespace-cdp sudo[2136843]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/highlegh/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136846]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hirefootballgame/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136870]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hodgsonmail/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136877]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/homebuyinghelp.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136881]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/homebuyinghelp.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136887]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/homovision -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136892]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-content
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136899]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-config.php
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136902]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/.wp-toolkit-ignore
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:12 nativespace-cdp sudo[2136907]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/howardon/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136911]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/huddersfield -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136918]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-content
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136922]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-config.php
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136925]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/.wp-toolkit-ignore
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136933]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/hyperchro.me -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136937]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-content
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136966]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-config.php
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136972]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/.wp-toolkit-ignore
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136977]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/hyperchrome -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:13 nativespace-cdp sudo[2136983]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ianrayne/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2136986]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/images -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2136997]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/impactconsultancy.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2137000]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/impactconsultancy.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2137004]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2137007]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html/www -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2137017]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html/www -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:14 nativespace-cdp sudo[2137021]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137024]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137053]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137056]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137059]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137062]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137065]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137068]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137071]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137074]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137077]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137080]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137083]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137086]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:25 nativespace-cdp sudo[2137089]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137092]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137096]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137099]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137102]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137105]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137108]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137111]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/inventory-pro.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137114]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/inventory-pro.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137117]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/ipadinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137120]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/ipadinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137123]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137126]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137130]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137133]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137136]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137139]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137142]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:26 nativespace-cdp sudo[2137145]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/irvinekilmarnockpresbytery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137148]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/irvinekilmarnockpresbytery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137160]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/isleofwi/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137163]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/wp-content
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137166]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/wp-config.php
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137169]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/.wp-toolkit-ignore
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137172]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/isleofwightguesthouse.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137175]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/isleofwightguesthouse.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:28 nativespace-cdp sudo[2137178]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:29 nativespace-cdp sudo[2137181]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:29 nativespace-cdp sudo[2137184]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jarvisin/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:29 nativespace-cdp sudo[2137187]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jennimil/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137190]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/wp-content
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137194]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/wp-config.php
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137197]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/.wp-toolkit-ignore
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137200]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/gilpin/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137203]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/jlive.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137206]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/jlive.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137209]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jonhartl/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137212]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/wp-content
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137216]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/wp-config.php
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137219]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/../wp-config.php
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137222]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/joomla -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137225]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html/justbengals.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137228]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html/justbengals.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:30 nativespace-cdp sudo[2137231]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/kategilpin/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:32 nativespace-cdp sudo[2137234]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/katieclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:32 nativespace-cdp sudo[2137239]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/katieclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:32 nativespace-cdp sudo[2137243]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/kess2012.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137246]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/kess2012.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137252]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/kidderminster -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137255]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-content
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137258]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-config.php
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137261]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/.wp-toolkit-ignore
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137264]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137267]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/Koro -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:33 nativespace-cdp sudo[2137270]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ladburyp/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:34 nativespace-cdp sudo[2137273]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/wp-content
Sep 15 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:34 nativespace-cdp sudo[2137277]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/wp-config.php
Sep 15 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:34 nativespace-cdp sudo[2137280]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/.wp-toolkit-ignore
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137283]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/wp-content
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137286]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/wp-config.php
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137289]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/.wp-toolkit-ignore
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137293]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/wp-content
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137296]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/wp-config.php
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137299]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/.wp-toolkit-ignore
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137302]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lakesan1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137305]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbscrmod/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137308]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137311]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ledburyfoodbank.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137314]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ledburyfoodbank.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137317]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/leereyn1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:35 nativespace-cdp sudo[2137320]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137323]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137336]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137339]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137342]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137345]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137348]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137351]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137354]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137357]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137360]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137363]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137366]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137369]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137372]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137376]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137379]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137382]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137385]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137388]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137391]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137394]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137397]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137400]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:38 nativespace-cdp sudo[2137403]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legotest -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:40 nativespace-cdp sudo[2137406]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/wp-content
Sep 15 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:40 nativespace-cdp sudo[2137412]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/wp-config.php
Sep 15 05:03:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:40 nativespace-cdp sudo[2137415]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/.wp-toolkit-ignore
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137418]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leicester -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137421]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-content
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137424]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-config.php
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137427]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/.wp-toolkit-ignore
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137430]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leigh -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137433]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-content
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137436]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-config.php
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137439]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/.wp-toolkit-ignore
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137442]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leyland -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137445]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-content
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137448]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-config.php
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137451]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/.wp-toolkit-ignore
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137454]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/lichfield -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137457]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-content
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137460]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-config.php
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137463]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/.wp-toolkit-ignore
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:41 nativespace-cdp sudo[2137466]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lkpier/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137469]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/wp-content
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137476]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/wp-config.php
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137479]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/.wp-toolkit-ignore
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137482]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html/link -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137485]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/live -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137488]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk/live -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137491]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk/live -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137494]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137497]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137500]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137503]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:42 nativespace-cdp sudo[2137506]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137509]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-content
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137534]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-config.php
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137538]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/.wp-toolkit-ignore
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137541]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137546]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-content
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137553]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-config.php
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137556]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/.wp-toolkit-ignore
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:43 nativespace-cdp sudo[2137559]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/loudounchurch.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:44 nativespace-cdp sudo[2137562]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/loudounchurch.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:45 nativespace-cdp sudo[2137615]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/loughborough -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:45 nativespace-cdp sudo[2137624]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-content
Sep 15 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:45 nativespace-cdp sudo[2137627]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-config.php
Sep 15 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:45 nativespace-cdp sudo[2137630]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/.wp-toolkit-ignore
Sep 15 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:45 nativespace-cdp sudo[2137635]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legorobotclub/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137639]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-content
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137668]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-config.php
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137671]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/.wp-toolkit-ignore
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137674]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/macclesfield -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137677]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-content
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137680]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-config.php
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137683]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/.wp-toolkit-ignore
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137686]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/maflemin/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137690]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/magichat/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137694]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/manchester -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137697]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-content
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137700]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-config.php
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137703]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/.wp-toolkit-ignore
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137706]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/mansfield -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137709]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-content
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137712]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-config.php
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137716]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/.wp-toolkit-ignore
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137719]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/david/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137722]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/markward/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137725]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/martsblo/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:46 nativespace-cdp sudo[2137729]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137732]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-content
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137737]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137740]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/.wp-toolkit-ignore
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137743]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/wp-content
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137746]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137749]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/../wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137752]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/../wp-includes
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137755]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/wp-content
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137758]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137761]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/../wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137765]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/../wp-includes
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137768]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/wp-content
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137771]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137774]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/.wp-toolkit-ignore
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137777]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137780]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137783]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137787]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/wp-content
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137790]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/wp-config.php
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137793]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/.wp-toolkit-ignore
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137797]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/mcleanforth.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:47 nativespace-cdp sudo[2137800]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/mcleanforth.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137803]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/media/mediapeople.tv -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137806]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/megacards/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137809]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/middleeast-training.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137812]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/middleeast-training.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137815]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/midlands -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137818]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-content
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137821]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-config.php
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137824]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/.wp-toolkit-ignore
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137827]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137830]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-content
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137834]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-config.php
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137837]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/.wp-toolkit-ignore
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137840]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-content
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137843]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-config.php
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137846]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/.wp-toolkit-ignore
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137849]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/missfoxglove.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137852]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:48 nativespace-cdp sudo[2137855]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137858]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/mod2 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137864]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137868]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137871]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/mod2 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137874]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/monmouthmt.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137877]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/monmouthmt.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137880]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stagingerris/public_html/montel.stagingerris.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137883]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/moonmousecreative.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137886]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/moonmousecreative.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137889]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/moraycoastescapes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137892]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/moraycoastescapes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137895]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/MP40 -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:51 nativespace-cdp sudo[2137898]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/muchbirchparish.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:52 nativespace-cdp sudo[2137901]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/muchbirchparish.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:52 nativespace-cdp sudo[2137907]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/musorguk/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:53 nativespace-cdp sudo[2137910]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/wp-content
Sep 15 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:53 nativespace-cdp sudo[2137916]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/wp-config.php
Sep 15 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:53 nativespace-cdp sudo[2137919]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/.wp-toolkit-ignore
Sep 15 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:53 nativespace-cdp sudo[2137922]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/my -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:54 nativespace-cdp sudo[2137925]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nativene/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:54 nativespace-cdp sudo[2137928]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nstriton/public_html/nativespace-triton.ns-triton.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:03:54 nativespace-cdp sudo[2137931]: pam_unix(sudo:session): session closed for user root
Sep 15 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:02 nativespace-cdp sudo[2137934]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/ndpwesthampstead.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:02 nativespace-cdp sudo[2137970]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/ndpwesthampstead.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:02 nativespace-cdp sudo[2137973]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/newnhamstpetersschool.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:02 nativespace-cdp sudo[2137976]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/newnhamstpetersschool.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:02 nativespace-cdp sudo[2137979]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/newstoda/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:03 nativespace-cdp sudo[2137982]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/wp-content
Sep 15 05:04:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:03 nativespace-cdp sudo[2137986]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/wp-config.php
Sep 15 05:04:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:03 nativespace-cdp sudo[2137989]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/.wp-toolkit-ignore
Sep 15 05:04:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:03 nativespace-cdp sudo[2137992]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ninejimm/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:04 nativespace-cdp sudo[2137995]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/wp-content
Sep 15 05:04:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:04 nativespace-cdp sudo[2137999]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/wp-config.php
Sep 15 05:04:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:04 nativespace-cdp sudo[2138002]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/.wp-toolkit-ignore
Sep 15 05:04:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:04 nativespace-cdp sudo[2138005]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nomistakes/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138008]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/northshoresoftware.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138016]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/northshoresoftware.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138019]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/northwest -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138022]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-content
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138025]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-config.php
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138028]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/.wp-toolkit-ignore
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138031]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/nottingham -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138034]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-content
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138037]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-config.php
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138040]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/.wp-toolkit-ignore
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:06 nativespace-cdp sudo[2138043]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nove/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138046]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nove/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138052]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nscdp/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138055]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nsceres/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138058]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nstriton/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138062]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/nuedesign.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138065]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/nuedesign.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138069]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/nuneaton -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138072]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-content
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138075]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-config.php
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138078]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/.wp-toolkit-ignore
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138081]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/oddleberry.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138084]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-content
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138087]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-config.php
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138090]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/.wp-toolkit-ignore
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138093]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/oldham -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:07 nativespace-cdp sudo[2138096]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-content
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138099]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-config.php
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138102]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/.wp-toolkit-ignore
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138105]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138108]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138111]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138114]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138117]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138120]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138123]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138126]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/onlycontents.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138129]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/onlycontents.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138132]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/outdoorc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138135]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/wp-content
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138139]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/wp-config.php
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138142]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/.wp-toolkit-ignore
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138145]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/oxfraud -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:08 nativespace-cdp sudo[2138148]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/oxfraud2 -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:09 nativespace-cdp sudo[2138151]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/foods/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:10 nativespace-cdp sudo[2138154]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/alexadmin/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:10 nativespace-cdp sudo[2138158]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138161]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138176]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138179]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138182]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/wp-content
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138185]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/wp-config.php
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138188]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/.wp-toolkit-ignore
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138191]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/wp-content
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138194]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/wp-config.php
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138197]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/.wp-toolkit-ignore
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138200]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/wp-content
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138203]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/wp-config.php
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138206]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/.wp-toolkit-ignore
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138209]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/wp-content
Sep 15 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:15 nativespace-cdp sudo[2138212]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/wp-config.php
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138215]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/.wp-toolkit-ignore
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138218]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138221]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138224]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138227]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/wp-content
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138230]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/wp-config.php
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138233]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/.wp-toolkit-ignore
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138236]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/wp-content
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138239]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/wp-config.php
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138242]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/.wp-toolkit-ignore
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138246]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/philmcph/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138249]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/wp-content
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138254]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/wp-config.php
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138257]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/.wp-toolkit-ignore
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138260]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/photos.leadbetter.cc -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138263]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/photos.leadbetter.cc -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138266]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/php -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:16 nativespace-cdp sudo[2138269]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138272]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138277]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138280]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138283]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138286]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138289]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138292]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138295]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138299]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138302]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138305]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138308]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138311]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:17 nativespace-cdp sudo[2138314]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138317]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138321]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138324]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138327]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138330]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138333]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138336]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-ne.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138339]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138342]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138345]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138351]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138354]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138357]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:18 nativespace-cdp sudo[2138360]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138363]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138366]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138369]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138372]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138375]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138378]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138381]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138384]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138387]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138390]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.pro -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138393]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.pro -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138396]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.services -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138399]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138402]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138405]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138408]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.services -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138412]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138416]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138419]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:19 nativespace-cdp sudo[2138422]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/www.pinstripefranchise.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138425]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/www.pinstripefranchise.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138428]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138431]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138434]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138437]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138440]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138443]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138446]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138449]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:20 nativespace-cdp sudo[2138452]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138455]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138459]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138462]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138465]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138468]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138471]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138474]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138477]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeoffice.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138481]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeoffice.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138484]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138487]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138490]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:21 nativespace-cdp sudo[2138493]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138496]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138499]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138502]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138506]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138509]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138513]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138516]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138519]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138522]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138525]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:22 nativespace-cdp sudo[2138528]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138531]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138534]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138537]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138540]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138544]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138547]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138550]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeutilities.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138553]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeutilities.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138556]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/fancydresspiratecostumes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138559]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-ne.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138562]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/portfolio -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138565]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/privatelandlordservices.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138568]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/privatelandlordservices.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138571]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138574]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/emma.care -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138577]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/emma.care -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138580]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ralphbarnes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138583]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ralphbarnes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138586]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/randomclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138589]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/randomclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138592]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:23 nativespace-cdp sudo[2138595]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:24 nativespace-cdp sudo[2138598]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/redcaffeine.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:24 nativespace-cdp sudo[2138601]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/redcaffeine.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:24 nativespace-cdp sudo[2138604]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/redziller.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:24 nativespace-cdp sudo[2138608]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/redziller.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:24 nativespace-cdp sudo[2138611]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/reliable/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:24 nativespace-cdp sudo[2138614]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ptkxhsbt/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:32 nativespace-cdp sudo[2138617]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:33 nativespace-cdp sudo[2138645]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138649]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.net -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138652]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138655]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.net -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138658]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ultbcrra/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138661]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ulsukarm/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138664]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/public_html/wp-content
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138667]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/rochdale -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138670]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-content
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138673]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-config.php
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138676]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/.wp-toolkit-ignore
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138679]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/romaldki/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:34 nativespace-cdp sudo[2138682]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ulsukarm/rtadevelopment.robert-taylor.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138685]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/wp-content
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138689]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/wp-config.php
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138692]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/.wp-toolkit-ignore
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138695]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/rugby -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138698]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-content
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138701]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-config.php
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138704]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/.wp-toolkit-ignore
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138707]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/sale -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138710]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-content
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138713]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-config.php
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138716]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/.wp-toolkit-ignore
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138719]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/salford -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138722]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-content
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138725]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-config.php
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138728]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/.wp-toolkit-ignore
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138731]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/sams -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138734]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138737]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138740]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138743]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/branko/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:35 nativespace-cdp sudo[2138746]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sarafoundation/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138749]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138791]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/savethealliance.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138794]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/savethealliance.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138797]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/schlossrothenburg.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138800]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/schlossrothenburg.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138803]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/smrszyqg/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138807]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/severnvaledeanery.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138810]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/severnvaledeanery.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138813]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/severnwyema.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:40 nativespace-cdp sudo[2138817]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/severnwyema.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138820]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/shiningpyramid.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138823]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/shiningpyramid.org -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138827]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138830]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/sibtoncc -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138833]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/sibtoncc -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138836]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/sinclairmanagement -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138839]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/sindencox-art.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138842]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/sindencox-art.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138846]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sketchy/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:41 nativespace-cdp sudo[2138849]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138853]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138857]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138860]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/smitrod.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138863]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/smitrod.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138866]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/solihull -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138870]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-content
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138873]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-config.php
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138876]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/.wp-toolkit-ignore
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138879]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ptkxhsbt/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138882]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hodgesonweb/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138885]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/sams/wp -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138888]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138891]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138894]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:42 nativespace-cdp sudo[2138897]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sosevalu/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138900]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/southlon/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138904]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/southwestbrassbandassociation.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138907]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/southwestbrassbandassociation.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138910]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/spectrum/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138913]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/wp-content
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138916]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/wp-config.php
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138919]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/.wp-toolkit-ignore
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138922]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stafford -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138925]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-content
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138928]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-config.php
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138931]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/.wp-toolkit-ignore
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138934]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legorobotclub/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138937]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-content
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138941]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-config.php
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138944]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/.wp-toolkit-ignore
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:43 nativespace-cdp sudo[2138947]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stagingerris/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138950]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/starwigs_2.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138961]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/starwigs_2.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138964]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/careers/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138968]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bakery/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138971]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/steakbridieme/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138974]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lucy/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138977]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/steve/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138980]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/wp-content
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138984]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/wp-config.php
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138987]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/.wp-toolkit-ignore
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:46 nativespace-cdp sudo[2138990]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/foundation/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2138993]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/wp-content
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139004]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/wp-config.php
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139007]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/.wp-toolkit-ignore
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139010]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hubmaster/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139013]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139016]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stmichaelmitcheldean.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139019]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stmichaelmitcheldean.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139022]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stockport -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139025]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-content
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139028]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-config.php
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139031]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/.wp-toolkit-ignore
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139034]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stoke -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139037]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-content
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139040]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-config.php
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139043]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/.wp-toolkit-ignore
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139046]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/store -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139049]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:50 nativespace-cdp sudo[2139052]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/strathard.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139056]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/strathard.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139059]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stroud-deanery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139062]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stroud-deanery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139065]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stuartge/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139068]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/sturgessbarns/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139071]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/wp-content
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139075]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/wp-config.php
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139078]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/.wp-toolkit-ignore
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:51 nativespace-cdp sudo[2139081]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/sturgessbarns.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139084]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-content
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139090]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-config.php
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139094]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/.wp-toolkit-ignore
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139097]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/sturgessbarns.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139100]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-content
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139103]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-config.php
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139106]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/.wp-toolkit-ignore
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139109]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/superbstuff.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139112]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/superbstuff.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139115]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/havantho/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139118]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/suttoncoldfield -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139121]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-content
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139124]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-config.php
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139127]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/.wp-toolkit-ignore
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139130]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/swbba.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139133]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/swbba.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139136]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/tamworth -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139139]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-content
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139142]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-config.php
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139145]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/.wp-toolkit-ignore
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139148]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/tdcc-online.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139151]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/tdcc-online.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139155]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/tenancy-deposit-scheme-scotland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:53 nativespace-cdp sudo[2139158]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139161]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139165]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139168]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139171]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139174]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139177]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139180]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/telford -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139183]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-content
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139186]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-config.php
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139189]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/.wp-toolkit-ignore
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139192]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/temperaturemonitor.info -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139195]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/temperaturemonitor.info -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139198]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/tenancy-deposit-scheme-scotland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139201]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/ranxtertest -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139204]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html/test -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139207]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html/testlink -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139210]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/atestord/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139213]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/theblack/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139216]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/thedogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139219]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/thedogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139222]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/Thegooddogshop.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139225]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/Thegooddogshop.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139228]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/thegooddogshop.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139231]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/thegooddogshop.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:54 nativespace-cdp sudo[2139234]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hidden/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139237]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/wp-content
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139240]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/wp-config.php
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139243]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/../wp-config.php
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139246]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139249]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/leftie/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139253]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/wp-content
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139256]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/wp-config.php
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139259]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/../wp-config.php
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139262]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/thelordslarder.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139265]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/thelordslarder.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139268]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/thenorthseashore.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139271]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/thenorthseashore.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139274]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/thesevernforum.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139277]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/thesevernforum.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:04:55 nativespace-cdp sudo[2139280]: pam_unix(sudo:session): session closed for user root
Sep 15 05:04:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/still/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:04:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139283]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/tigerestates.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139294]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139298]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html/tigermanagement.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139301]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html/tigermetre.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139305]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tomandle/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139308]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchinventories.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139311]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchinventories.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139314]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchis.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:00 nativespace-cdp sudo[2139317]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchis.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139320]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/traddad -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139323]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139326]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139329]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139332]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/traddad -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139335]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139338]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139341]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139344]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/trafford -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139347]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-content
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139350]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-config.php
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139353]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/.wp-toolkit-ignore
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139356]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/training-middleeast.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139359]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/training-middleeast.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139362]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/traversingthehinterland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139365]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139368]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139371]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139375]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/traversingthehinterland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139378]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139381]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139384]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:01 nativespace-cdp sudo[2139387]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/trendytiles.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139391]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-content
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139508]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-config.php
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139512]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/.wp-toolkit-ignore
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139515]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/trendytiles.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139518]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-content
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139522]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-config.php
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139525]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/.wp-toolkit-ignore
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:08 nativespace-cdp sudo[2139528]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/trixietrapp -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139531]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/wp-content
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139534]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/wp-config.php
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139537]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/.wp-toolkit-ignore
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139540]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/ukdrivingroads.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139543]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/ukdrivingroads.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139546]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/ranxter-upload -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139549]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/users -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139552]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vantagep/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:09 nativespace-cdp sudo[2139555]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:10 nativespace-cdp sudo[2139559]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/walkden -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:10 nativespace-cdp sudo[2139562]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-content
Sep 15 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:10 nativespace-cdp sudo[2139565]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-config.php
Sep 15 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:10 nativespace-cdp sudo[2139568]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/.wp-toolkit-ignore
Sep 15 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:10 nativespace-cdp sudo[2139571]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/crrtipdl/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139574]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/wp-content
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139578]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/wp-config.php
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139581]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/.wp-toolkit-ignore
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139584]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/walsall -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139587]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-content
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139590]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-config.php
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139593]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/.wp-toolkit-ignore
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139596]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/warrington -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139599]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-content
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139602]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-config.php
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139605]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/.wp-toolkit-ignore
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139608]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/carsinyo/public_html/wavs.co -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139611]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-content
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139615]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-config.php
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139618]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/.wp-toolkit-ignore
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139621]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/webba.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139624]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/webba.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:11 nativespace-cdp sudo[2139627]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:12 nativespace-cdp sudo[2139630]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/wp-content
Sep 15 05:05:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:12 nativespace-cdp sudo[2139636]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/wp-config.php
Sep 15 05:05:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:12 nativespace-cdp sudo[2139639]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/.wp-toolkit-ignore
Sep 15 05:05:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:12 nativespace-cdp sudo[2139642]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/werefoxproductions.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139645]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-content
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139650]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-config.php
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139653]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/.wp-toolkit-ignore
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139656]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/werefoxproductions.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139659]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-content
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139662]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-config.php
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139666]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/.wp-toolkit-ignore
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139669]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/what/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139672]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/widnes -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139675]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-content
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139678]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-config.php
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139681]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/.wp-toolkit-ignore
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139684]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/wigan -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139687]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-content
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139690]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-config.php
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139693]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/.wp-toolkit-ignore
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139696]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/wilsonleo.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139699]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/wilsonleo.com -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139702]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139705]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139708]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/outdoorc/public_html/windkatcowls.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:13 nativespace-cdp sudo[2139711]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/windwhistlewarren.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139714]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/windwhistlewarren.org.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139717]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/winsfordhouseproduce.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139720]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/winsfordhouseproduce.co.uk -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139723]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/wolverhampton -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139726]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-content
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139729]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-config.php
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139733]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/.wp-toolkit-ignore
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139736]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/worcester -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139739]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-content
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139742]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-config.php
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139745]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/.wp-toolkit-ignore
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139748]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139751]: pam_unix(sudo:session): session closed for user root
Sep 15 05:05:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 15 05:05:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:05:14 nativespace-cdp sudo[2139754]: pam_unix(sudo:session): session closed for user root
Sep 15 05:06:33 nativespace-cdp sshd[2140012]: Connection closed by 159.100.136.21 port 42356 [preauth]
Sep 15 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:22 nativespace-cdp sudo[2140538]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:22 nativespace-cdp sudo[2140541]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:22 nativespace-cdp sudo[2140545]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:22 nativespace-cdp sudo[2140550]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:26 nativespace-cdp sudo[2140553]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:26 nativespace-cdp sudo[2140565]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:26 nativespace-cdp sudo[2140568]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:26 nativespace-cdp sudo[2140571]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:26 nativespace-cdp sudo[2140574]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 05:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:26 nativespace-cdp sudo[2140577]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 05:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:27 nativespace-cdp sudo[2140580]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:30 nativespace-cdp sudo[2140599]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:30 nativespace-cdp sudo[2140603]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=still user-2=agproduc user-3=leereyn1 user-4=stephani user-5=jarvisin user-6=theblack user-7=hodgesonweb user-8=spectrum user-9=ulsukarm user-10=markward user-11=booff user-12=foundation user-13=maflemin user-14=lbscrmod user-15=connect9 user-16=athenare user-17=vantagep user-18=lbhyisi user-19=hhdugcor user-20=magichat user-21=martsblo user-22=ptkxhsbt user-23=dickemery123 user-24=wilsonsw user-25=musorguk user-26=megacards user-27=brmrjxl user-28=lakesan1 user-29=sarafoundation user-30=atestord user-31=strathar user-32=ianrayne user-33=accooper user-34=thqkgnbz user-35=connectedshoppin user-36=elecleis user-37=gilpin user-38=milloyco user-39=carsinyo user-40=fetch user-41=hubmaster user-42=putterfi user-43=costestimatorco user-44=firstrel user-45=clarkass user-46=southlon user-47=highlegh
Sep 15 05:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstred user-49=firstres user-50=jonhartl user-51=seftvta user-52=ultbcrra user-53=opaiscyx user-54=coursemc user-55=askhform user-56=stuartge user-57=innovat1 user-58=nativene user-59=alexadmin user-60=skyfirec user-61=bedfords user-62=bemadonn user-63=ggaaorgu user-64=belle user-65=newstoda user-66=brighto1 user-67=nstriton user-68=battlere user-69=oneoarco user-70=firstre2 user-71=vivienn1 user-72=eatspam user-73=darkstar user-74=beauty user-75=dhyana user-76=burydropin user-77=fawcettd user-78=nsceres user-79=zebrapho user-80=bwppodcast user-81=steve user-82=sibtoncc user-83=asandcoc user-84=hirefootballgame user-85=courseme user-86=eugincou user-87=reliable user-88=ninejimm user-89=cambria1 user-90=cathski user-91=pugwash user-92=paulmca1 user-93=howardon user-94=cwsocial user-95=smrszyqg user-96=isleofwi user-97=tigerlet user-98=barbersh user-99=hidden user-100=nomistakes user-101=fortunaz
Sep 15 05:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=health2045 user-103=foods user-104=leftie user-105=putterfc user-106=nscdp user-107=ctedorgu user-108=philmcph user-109=firstre5 user-110=steakbridieme user-111=donnychicago user-112=lkpier user-113=branko user-114=hodgsonmail user-115=outdoorc user-116=ranxterc user-117=romaldki user-118=attlebor user-119=lucy user-120=onlycont user-121=mcdermos user-122=chrisdal user-123=nbhavers user-124=careers user-125=david user-126=tomandle user-127=jennimil user-128=kategilpin user-129=ladburyp user-130=stagingerris user-131=dancinggardener user-132=design user-133=what user-134=oubpgvbx user-135=tstardom user-136=nvihkvu user-137=cath user-138=sketchy user-139=havantho user-140=sosevalu user-141=crrtipdl user-142=bakery user-143=nove user-144=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 05:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:31 nativespace-cdp sudo[2140609]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:31 nativespace-cdp sudo[2140617]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sm9ZWe8lktkCNZmY.~
Sep 15 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:31 nativespace-cdp sudo[2140620]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sm9ZWe8lktkCNZmY.~'
Sep 15 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:31 nativespace-cdp sudo[2140623]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sm9ZWe8lktkCNZmY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:31 nativespace-cdp sudo[2140627]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:31 nativespace-cdp sudo[2140630]: pam_unix(sudo:session): session closed for user root
Sep 15 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 05:09:33 nativespace-cdp sudo[2140653]: pam_unix(sudo:session): session closed for user root
Sep 15 05:11:33 nativespace-cdp sshd[2141173]: Connection closed by 159.100.136.21 port 51496 [preauth]
Sep 15 05:16:33 nativespace-cdp sshd[2142367]: Connection closed by 159.100.136.21 port 60704 [preauth]
Sep 15 05:21:33 nativespace-cdp sshd[2143501]: Connection closed by 159.100.136.21 port 41704 [preauth]
Sep 15 05:26:33 nativespace-cdp sshd[2144545]: Connection closed by 159.100.136.21 port 50736 [preauth]
Sep 15 05:31:36 nativespace-cdp sshd[2145927]: Connection closed by 159.100.136.21 port 59754 [preauth]
Sep 15 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user clarkass by (uid=0)
Sep 15 05:35:10 nativespace-cdp su[2147085]: pam_unix(su:session): session closed for user clarkass
Sep 15 05:36:33 nativespace-cdp sshd[2147353]: Connection closed by 159.100.136.21 port 41026 [preauth]
Sep 15 05:41:34 nativespace-cdp sshd[2148385]: Connection closed by 159.100.136.21 port 50300 [preauth]
Sep 15 05:46:34 nativespace-cdp sshd[2149581]: Connection closed by 159.100.136.21 port 59558 [preauth]
Sep 15 05:51:33 nativespace-cdp sshd[2150861]: Connection closed by 159.100.136.21 port 40306 [preauth]
Sep 15 05:56:33 nativespace-cdp sshd[2151879]: Connection closed by 159.100.136.21 port 49584 [preauth]
Sep 15 06:01:34 nativespace-cdp sshd[2153365]: Connection closed by 159.100.136.21 port 59006 [preauth]
Sep 15 06:06:33 nativespace-cdp sshd[2154493]: Connection closed by 159.100.136.21 port 40452 [preauth]
Sep 15 06:09:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 06:09:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:06 nativespace-cdp sudo[2154977]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 06:09:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:06 nativespace-cdp sudo[2154980]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 06:09:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:07 nativespace-cdp sudo[2154983]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 06:09:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:07 nativespace-cdp sudo[2154988]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 06:09:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2154991]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2155003]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2155008]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2155011]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2155014]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2155017]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 06:09:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:10 nativespace-cdp sudo[2155020]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:12 nativespace-cdp sudo[2155030]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:12 nativespace-cdp sudo[2155034]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=crrtipdl user-2=sosevalu user-3=bakery user-4=nove user-5=boldover user-6=kategilpin user-7=dancinggardener user-8=stagingerris user-9=ladburyp user-10=design user-11=what user-12=oubpgvbx user-13=tstardom user-14=nvihkvu user-15=havantho user-16=sketchy user-17=cath user-18=mcdermos user-19=chrisdal user-20=david user-21=nbhavers user-22=careers user-23=tomandle user-24=jennimil user-25=branko user-26=hodgsonmail user-27=outdoorc user-28=ranxterc user-29=romaldki user-30=lucy user-31=attlebor user-32=onlycont user-33=smrszyqg user-34=isleofwi user-35=barbersh user-36=tigerlet user-37=nomistakes user-38=hidden user-39=leftie user-40=foods user-41=health2045 user-42=fortunaz user-43=nscdp user-44=putterfc user-45=firstre5 user-46=steakbridieme user-47=donnychicago user-48=philmcph
Sep 15 06:09:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ctedorgu user-50=lkpier user-51=hirefootballgame user-52=courseme user-53=eugincou user-54=reliable user-55=ninejimm user-56=cambria1 user-57=cathski user-58=cwsocial user-59=pugwash user-60=howardon user-61=paulmca1 user-62=zebrapho user-63=bwppodcast user-64=steve user-65=asandcoc user-66=sibtoncc user-67=darkstar user-68=eatspam user-69=beauty user-70=dhyana user-71=fawcettd user-72=burydropin user-73=nsceres user-74=bedfords user-75=bemadonn user-76=newstoda user-77=ggaaorgu user-78=belle user-79=nstriton user-80=brighto1 user-81=oneoarco user-82=battlere user-83=vivienn1 user-84=firstre2 user-85=stuartge user-86=askhform user-87=innovat1 user-88=nativene user-89=skyfirec user-90=alexadmin user-91=costestimatorco user-92=firstrel user-93=clarkass user-94=highlegh user-95=southlon user-96=firstred user-97=firstres user-98=ultbcrra user-99=jonhartl user-100=seftvta user-101=coursemc user-102=opaiscyx
Sep 15 06:09:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ianrayne user-104=accooper user-105=thqkgnbz user-106=connectedshoppin user-107=elecleis user-108=milloyco user-109=gilpin user-110=fetch user-111=carsinyo user-112=putterfi user-113=hubmaster user-114=wilsonsw user-115=megacards user-116=musorguk user-117=brmrjxl user-118=lakesan1 user-119=atestord user-120=sarafoundation user-121=strathar user-122=hhdugcor user-123=lbhyisi user-124=magichat user-125=martsblo user-126=ptkxhsbt user-127=dickemery123 user-128=ulsukarm user-129=foundation user-130=markward user-131=booff user-132=lbscrmod user-133=maflemin user-134=vantagep user-135=athenare user-136=connect9 user-137=agproduc user-138=still user-139=leereyn1 user-140=stephani user-141=jarvisin user-142=hodgesonweb user-143=theblack user-144=spectrum feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 06:09:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:13 nativespace-cdp sudo[2155039]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 06:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:13 nativespace-cdp sudo[2155044]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zkwabGKYw7skSR5s.~
Sep 15 06:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:13 nativespace-cdp sudo[2155047]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zkwabGKYw7skSR5s.~'
Sep 15 06:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:13 nativespace-cdp sudo[2155050]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zkwabGKYw7skSR5s.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 06:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:13 nativespace-cdp sudo[2155054]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 06:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:13 nativespace-cdp sudo[2155057]: pam_unix(sudo:session): session closed for user root
Sep 15 06:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 06:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 06:09:30 nativespace-cdp sudo[2155100]: pam_unix(sudo:session): session closed for user root
Sep 15 06:11:33 nativespace-cdp sshd[2155616]: Connection closed by 159.100.136.21 port 47980 [preauth]
Sep 15 06:16:33 nativespace-cdp sshd[2157122]: Connection closed by 159.100.136.21 port 56146 [preauth]
Sep 15 06:21:34 nativespace-cdp sshd[2158351]: Connection closed by 159.100.136.21 port 37102 [preauth]
Sep 15 06:26:33 nativespace-cdp sshd[2159478]: Connection closed by 159.100.136.21 port 46760 [preauth]
Sep 15 06:31:33 nativespace-cdp sshd[2160703]: Connection closed by 159.100.136.21 port 56234 [preauth]
Sep 15 06:36:33 nativespace-cdp sshd[2161856]: Connection closed by 159.100.136.21 port 37126 [preauth]
Sep 15 06:41:33 nativespace-cdp sshd[2162958]: Connection closed by 159.100.136.21 port 46034 [preauth]
Sep 15 06:46:34 nativespace-cdp sshd[2164476]: Connection closed by 159.100.136.21 port 55208 [preauth]
Sep 15 06:51:33 nativespace-cdp sshd[2165467]: Connection closed by 159.100.136.21 port 36358 [preauth]
Sep 15 06:56:35 nativespace-cdp sshd[2166508]: Connection closed by 159.100.136.21 port 46000 [preauth]
Sep 15 07:01:33 nativespace-cdp sshd[2167941]: Connection closed by 159.100.136.21 port 55122 [preauth]
Sep 15 07:06:33 nativespace-cdp sshd[2168972]: Connection closed by 159.100.136.21 port 34124 [preauth]
Sep 15 07:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 07:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:14 nativespace-cdp sudo[2169535]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 07:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:14 nativespace-cdp sudo[2169538]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 07:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:15 nativespace-cdp sudo[2169541]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 07:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:15 nativespace-cdp sudo[2169552]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 07:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169555]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169570]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169574]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169577]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169580]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169583]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:19 nativespace-cdp sudo[2169586]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 07:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:24 nativespace-cdp sudo[2169600]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 07:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:25 nativespace-cdp sudo[2169604]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=beauty user-3=eatspam user-4=darkstar user-5=nsceres user-6=burydropin user-7=fawcettd user-8=steve user-9=bwppodcast user-10=zebrapho user-11=asandcoc user-12=sibtoncc user-13=eugincou user-14=courseme user-15=hirefootballgame user-16=paulmca1 user-17=howardon user-18=pugwash user-19=cwsocial user-20=cambria1 user-21=cathski user-22=ninejimm user-23=reliable user-24=hidden user-25=nomistakes user-26=tigerlet user-27=barbersh user-28=isleofwi user-29=smrszyqg user-30=lkpier user-31=philmcph user-32=ctedorgu user-33=steakbridieme user-34=firstre5 user-35=donnychicago user-36=putterfc user-37=nscdp user-38=health2045 user-39=fortunaz user-40=leftie user-41=foods user-42=romaldki user-43=outdoorc user-44=hodgsonmail user-45=ranxterc user-46=branko user-47=onlycont user-48=attlebor
Sep 15 07:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=careers user-51=nbhavers user-52=david user-53=chrisdal user-54=mcdermos user-55=jennimil user-56=tomandle user-57=design user-58=ladburyp user-59=dancinggardener user-60=stagingerris user-61=kategilpin user-62=cath user-63=sketchy user-64=havantho user-65=nvihkvu user-66=tstardom user-67=oubpgvbx user-68=what user-69=bakery user-70=sosevalu user-71=crrtipdl user-72=boldover user-73=nove user-74=stephani user-75=leereyn1 user-76=still user-77=agproduc user-78=spectrum user-79=hodgesonweb user-80=theblack user-81=jarvisin user-82=ulsukarm user-83=athenare user-84=connect9 user-85=vantagep user-86=maflemin user-87=lbscrmod user-88=booff user-89=markward user-90=foundation user-91=magichat user-92=lbhyisi user-93=hhdugcor user-94=dickemery123 user-95=ptkxhsbt user-96=martsblo user-97=musorguk user-98=megacards user-99=wilsonsw user-100=strathar user-101=sarafoundation user-102=atestord
Sep 15 07:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lakesan1 user-104=brmrjxl user-105=connectedshoppin user-106=thqkgnbz user-107=accooper user-108=ianrayne user-109=hubmaster user-110=putterfi user-111=carsinyo user-112=fetch user-113=milloyco user-114=gilpin user-115=elecleis user-116=firstred user-117=southlon user-118=highlegh user-119=firstrel user-120=clarkass user-121=costestimatorco user-122=coursemc user-123=opaiscyx user-124=seftvta user-125=jonhartl user-126=ultbcrra user-127=firstres user-128=nativene user-129=innovat1 user-130=stuartge user-131=askhform user-132=skyfirec user-133=alexadmin user-134=belle user-135=ggaaorgu user-136=newstoda user-137=bemadonn user-138=bedfords user-139=firstre2 user-140=vivienn1 user-141=battlere user-142=oneoarco user-143=brighto1 user-144=nstriton feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 07:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 07:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:27 nativespace-cdp sudo[2169611]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:27 nativespace-cdp sudo[2169617]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ca7Jb0UwgAtWNt7y.~
Sep 15 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:27 nativespace-cdp sudo[2169620]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ca7Jb0UwgAtWNt7y.~'
Sep 15 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:27 nativespace-cdp sudo[2169623]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ca7Jb0UwgAtWNt7y.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:27 nativespace-cdp sudo[2169627]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 07:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:27 nativespace-cdp sudo[2169630]: pam_unix(sudo:session): session closed for user root
Sep 15 07:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 07:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 07:09:29 nativespace-cdp sudo[2169651]: pam_unix(sudo:session): session closed for user root
Sep 15 07:11:33 nativespace-cdp sshd[2170192]: Connection closed by 159.100.136.21 port 43528 [preauth]
Sep 15 07:16:34 nativespace-cdp sshd[2171340]: Connection closed by 159.100.136.21 port 53254 [preauth]
Sep 15 07:21:33 nativespace-cdp sshd[2172629]: Connection closed by 159.100.136.21 port 33922 [preauth]
Sep 15 07:26:33 nativespace-cdp sshd[2173762]: Connection closed by 159.100.136.21 port 43204 [preauth]
Sep 15 07:31:33 nativespace-cdp sshd[2175069]: Connection closed by 159.100.136.21 port 52506 [preauth]
Sep 15 07:36:33 nativespace-cdp sshd[2176297]: Connection closed by 159.100.136.21 port 33338 [preauth]
Sep 15 07:41:33 nativespace-cdp sshd[2177528]: Connection closed by 159.100.136.21 port 42652 [preauth]
Sep 15 07:46:36 nativespace-cdp sshd[2179110]: Connection closed by 159.100.136.21 port 51872 [preauth]
Sep 15 07:51:33 nativespace-cdp sshd[2180156]: Connection closed by 159.100.136.21 port 32968 [preauth]
Sep 15 07:56:33 nativespace-cdp sshd[2181177]: Connection closed by 159.100.136.21 port 42768 [preauth]
Sep 15 08:01:33 nativespace-cdp sshd[2182759]: Connection closed by 159.100.136.21 port 52118 [preauth]
Sep 15 08:06:33 nativespace-cdp sshd[2183971]: Connection closed by 159.100.136.21 port 33324 [preauth]
Sep 15 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:16 nativespace-cdp sudo[2184449]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:16 nativespace-cdp sudo[2184452]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:18 nativespace-cdp sudo[2184456]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:18 nativespace-cdp sudo[2184462]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:21 nativespace-cdp sudo[2184465]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:22 nativespace-cdp sudo[2184478]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:22 nativespace-cdp sudo[2184481]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:22 nativespace-cdp sudo[2184484]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:22 nativespace-cdp sudo[2184487]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:22 nativespace-cdp sudo[2184490]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:22 nativespace-cdp sudo[2184493]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 08:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:24 nativespace-cdp sudo[2184503]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 08:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:25 nativespace-cdp sudo[2184508]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=fawcettd user-3=burydropin user-4=dhyana user-5=darkstar user-6=eatspam user-7=beauty user-8=sibtoncc user-9=asandcoc user-10=steve user-11=zebrapho user-12=bwppodcast user-13=cwsocial user-14=paulmca1 user-15=pugwash user-16=howardon user-17=ninejimm user-18=reliable user-19=cambria1 user-20=cathski user-21=courseme user-22=eugincou user-23=hirefootballgame user-24=firstre5 user-25=steakbridieme user-26=donnychicago user-27=philmcph user-28=ctedorgu user-29=lkpier user-30=foods user-31=leftie user-32=fortunaz user-33=health2045 user-34=nscdp user-35=putterfc user-36=tigerlet user-37=barbersh user-38=nomistakes user-39=hidden user-40=smrszyqg user-41=isleofwi user-42=onlycont user-43=lucy user-44=attlebor user-45=romaldki user-46=branko user-47=ranxterc user-48=hodgsonmail
Sep 15 08:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=outdoorc user-50=jennimil user-51=tomandle user-52=david user-53=nbhavers user-54=careers user-55=mcdermos user-56=chrisdal user-57=nvihkvu user-58=havantho user-59=cath user-60=sketchy user-61=what user-62=oubpgvbx user-63=tstardom user-64=design user-65=kategilpin user-66=dancinggardener user-67=stagingerris user-68=ladburyp user-69=boldover user-70=nove user-71=crrtipdl user-72=sosevalu user-73=bakery user-74=theblack user-75=hodgesonweb user-76=spectrum user-77=jarvisin user-78=leereyn1 user-79=stephani user-80=agproduc user-81=still user-82=lbscrmod user-83=maflemin user-84=vantagep user-85=athenare user-86=connect9 user-87=foundation user-88=markward user-89=booff user-90=ulsukarm user-91=ptkxhsbt user-92=dickemery123 user-93=martsblo user-94=magichat user-95=hhdugcor user-96=lbhyisi user-97=atestord user-98=sarafoundation user-99=strathar user-100=brmrjxl user-101=lakesan1 user-102=megacards
Sep 15 08:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=musorguk user-104=wilsonsw user-105=fetch user-106=carsinyo user-107=hubmaster user-108=putterfi user-109=elecleis user-110=milloyco user-111=gilpin user-112=thqkgnbz user-113=connectedshoppin user-114=ianrayne user-115=accooper user-116=coursemc user-117=opaiscyx user-118=firstres user-119=ultbcrra user-120=seftvta user-121=jonhartl user-122=highlegh user-123=southlon user-124=firstred user-125=costestimatorco user-126=firstrel user-127=clarkass user-128=skyfirec user-129=alexadmin user-130=nativene user-131=askhform user-132=stuartge user-133=innovat1 user-134=oneoarco user-135=battlere user-136=vivienn1 user-137=firstre2 user-138=nstriton user-139=brighto1 user-140=bemadonn user-141=newstoda user-142=ggaaorgu user-143=belle user-144=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 08:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 08:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:27 nativespace-cdp sudo[2184517]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:27 nativespace-cdp sudo[2184524]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A828842J2tWf9P0I.~
Sep 15 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:27 nativespace-cdp sudo[2184528]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A828842J2tWf9P0I.~'
Sep 15 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:27 nativespace-cdp sudo[2184531]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A828842J2tWf9P0I.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:27 nativespace-cdp sudo[2184535]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 08:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:27 nativespace-cdp sudo[2184538]: pam_unix(sudo:session): session closed for user root
Sep 15 08:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 08:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 08:09:35 nativespace-cdp sudo[2184582]: pam_unix(sudo:session): session closed for user root
Sep 15 08:11:36 nativespace-cdp sshd[2185160]: Connection closed by 159.100.136.21 port 42846 [preauth]
Sep 15 08:16:35 nativespace-cdp sshd[2186363]: Connection closed by 159.100.136.21 port 52356 [preauth]
Sep 15 08:21:34 nativespace-cdp sshd[2187955]: Connection closed by 159.100.136.21 port 32996 [preauth]
Sep 15 08:26:33 nativespace-cdp sshd[2189016]: Connection closed by 159.100.136.21 port 41680 [preauth]
Sep 15 08:31:33 nativespace-cdp sshd[2190628]: Connection closed by 159.100.136.21 port 50734 [preauth]
Sep 15 08:36:36 nativespace-cdp sshd[2192106]: Connection closed by 159.100.136.21 port 60354 [preauth]
Sep 15 08:41:33 nativespace-cdp sshd[2193384]: Connection closed by 159.100.136.21 port 41148 [preauth]
Sep 15 08:46:33 nativespace-cdp sshd[2194777]: Connection closed by 159.100.136.21 port 50350 [preauth]
Sep 15 08:56:33 nativespace-cdp sshd[2197354]: Connection closed by 159.100.136.21 port 40472 [preauth]
Sep 15 09:01:37 nativespace-cdp sshd[2198766]: Connection closed by 159.100.136.21 port 49780 [preauth]
Sep 15 09:06:33 nativespace-cdp sshd[2200207]: Connection closed by 159.100.136.21 port 57152 [preauth]
Sep 15 09:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 09:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:27 nativespace-cdp sudo[2200706]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 09:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:27 nativespace-cdp sudo[2200710]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 09:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:35 nativespace-cdp sudo[2200714]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:35 nativespace-cdp sudo[2200741]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200744]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200767]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200772]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200776]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200781]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200787]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:41 nativespace-cdp sudo[2200792]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:46 nativespace-cdp sudo[2200816]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 09:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:48 nativespace-cdp sudo[2200822]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=beauty user-2=eatspam user-3=darkstar user-4=dhyana user-5=burydropin user-6=fawcettd user-7=nsceres user-8=bwppodcast user-9=zebrapho user-10=steve user-11=sibtoncc user-12=asandcoc user-13=hirefootballgame user-14=eugincou user-15=courseme user-16=cathski user-17=cambria1 user-18=reliable user-19=ninejimm user-20=paulmca1 user-21=pugwash user-22=howardon user-23=cwsocial user-24=smrszyqg user-25=isleofwi user-26=hidden user-27=nomistakes user-28=barbersh user-29=tigerlet user-30=putterfc user-31=nscdp user-32=health2045 user-33=fortunaz user-34=foods user-35=leftie user-36=lkpier user-37=ctedorgu user-38=philmcph user-39=firstre5 user-40=donnychicago user-41=steakbridieme user-42=ranxterc user-43=outdoorc user-44=hodgsonmail user-45=branko user-46=romaldki user-47=attlebor user-48=lucy
Sep 15 09:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=onlycont user-50=chrisdal user-51=mcdermos user-52=nbhavers user-53=careers user-54=david user-55=tomandle user-56=jennimil user-57=ladburyp user-58=dancinggardener user-59=stagingerris user-60=kategilpin user-61=design user-62=oubpgvbx user-63=tstardom user-64=what user-65=cath user-66=sketchy user-67=havantho user-68=nvihkvu user-69=bakery user-70=sosevalu user-71=crrtipdl user-72=nove user-73=boldover user-74=still user-75=agproduc user-76=stephani user-77=leereyn1 user-78=jarvisin user-79=spectrum user-80=theblack user-81=hodgesonweb user-82=ulsukarm user-83=booff user-84=markward user-85=foundation user-86=athenare user-87=connect9 user-88=vantagep user-89=maflemin user-90=lbscrmod user-91=lbhyisi user-92=hhdugcor user-93=magichat user-94=martsblo user-95=dickemery123 user-96=ptkxhsbt user-97=wilsonsw user-98=musorguk user-99=megacards user-100=brmrjxl user-101=lakesan1 user-102=strathar
Sep 15 09:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sarafoundation user-104=atestord user-105=accooper user-106=ianrayne user-107=connectedshoppin user-108=thqkgnbz user-109=milloyco user-110=gilpin user-111=elecleis user-112=hubmaster user-113=putterfi user-114=carsinyo user-115=fetch user-116=firstrel user-117=clarkass user-118=costestimatorco user-119=firstred user-120=southlon user-121=highlegh user-122=jonhartl user-123=seftvta user-124=ultbcrra user-125=firstres user-126=coursemc user-127=opaiscyx user-128=innovat1 user-129=stuartge user-130=askhform user-131=nativene user-132=skyfirec user-133=alexadmin user-134=bedfords user-135=belle user-136=ggaaorgu user-137=newstoda user-138=bemadonn user-139=brighto1 user-140=nstriton user-141=firstre2 user-142=vivienn1 user-143=battlere user-144=oneoarco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 09:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 09:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:49 nativespace-cdp sudo[2200832]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:50 nativespace-cdp sudo[2200841]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gWQI2Gq0OFf8QuE5.~
Sep 15 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:50 nativespace-cdp sudo[2200846]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gWQI2Gq0OFf8QuE5.~'
Sep 15 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:50 nativespace-cdp sudo[2200850]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gWQI2Gq0OFf8QuE5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:50 nativespace-cdp sudo[2200856]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:50 nativespace-cdp sudo[2200861]: pam_unix(sudo:session): session closed for user root
Sep 15 09:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 09:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 09:09:52 nativespace-cdp sudo[2200886]: pam_unix(sudo:session): session closed for user root
Sep 15 09:11:33 nativespace-cdp sshd[2201415]: Connection closed by 159.100.136.21 port 37098 [preauth]
Sep 15 09:16:34 nativespace-cdp sshd[2202691]: Connection closed by 159.100.136.21 port 46342 [preauth]
Sep 15 09:21:33 nativespace-cdp sshd[2204077]: Connection closed by 159.100.136.21 port 55792 [preauth]
Sep 15 09:26:33 nativespace-cdp sshd[2205129]: Connection closed by 159.100.136.21 port 36058 [preauth]
Sep 15 09:31:33 nativespace-cdp sshd[2206409]: Connection closed by 159.100.136.21 port 45538 [preauth]
Sep 15 09:36:33 nativespace-cdp sshd[2207770]: Connection closed by 159.100.136.21 port 54102 [preauth]
Sep 15 09:41:33 nativespace-cdp sshd[2209085]: Connection closed by 159.100.136.21 port 35378 [preauth]
Sep 15 09:46:33 nativespace-cdp sshd[2210620]: Connection closed by 159.100.136.21 port 44994 [preauth]
Sep 15 09:51:33 nativespace-cdp sshd[2211735]: Connection closed by 159.100.136.21 port 54084 [preauth]
Sep 15 09:56:33 nativespace-cdp sshd[2212776]: Connection closed by 159.100.136.21 port 35338 [preauth]
Sep 15 10:01:33 nativespace-cdp sshd[2214450]: Connection closed by 159.100.136.21 port 43808 [preauth]
Sep 15 10:06:35 nativespace-cdp sshd[2215608]: Connection closed by 159.100.136.21 port 53090 [preauth]
Sep 15 10:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 10:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:35 nativespace-cdp sudo[2216277]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 10:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:35 nativespace-cdp sudo[2216281]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 10:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:39 nativespace-cdp sudo[2216284]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:39 nativespace-cdp sudo[2216303]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:50 nativespace-cdp sudo[2216306]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:51 nativespace-cdp sudo[2216372]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:51 nativespace-cdp sudo[2216378]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:51 nativespace-cdp sudo[2216382]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:51 nativespace-cdp sudo[2216387]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:52 nativespace-cdp sudo[2216393]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 10:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:52 nativespace-cdp sudo[2216400]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 10:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:56 nativespace-cdp sudo[2216415]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 10:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:09:57 nativespace-cdp sudo[2216434]: pam_unix(sudo:session): session closed for user root
Sep 15 10:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brighto1 user-2=nstriton user-3=battlere user-4=oneoarco user-5=firstre2 user-6=vivienn1 user-7=bedfords user-8=bemadonn user-9=belle user-10=ggaaorgu user-11=newstoda user-12=skyfirec user-13=alexadmin user-14=stuartge user-15=askhform user-16=innovat1 user-17=nativene user-18=firstres user-19=jonhartl user-20=seftvta user-21=ultbcrra user-22=opaiscyx user-23=coursemc user-24=costestimatorco user-25=clarkass user-26=firstrel user-27=southlon user-28=highlegh user-29=firstred user-30=elecleis user-31=gilpin user-32=milloyco user-33=carsinyo user-34=fetch user-35=hubmaster user-36=putterfi user-37=ianrayne user-38=accooper user-39=thqkgnbz user-40=connectedshoppin user-41=lakesan1 user-42=brmrjxl user-43=sarafoundation user-44=atestord user-45=strathar user-46=wilsonsw user-47=musorguk
Sep 15 10:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=megacards user-49=martsblo user-50=ptkxhsbt user-51=dickemery123 user-52=lbhyisi user-53=hhdugcor user-54=magichat user-55=markward user-56=foundation user-57=booff user-58=maflemin user-59=lbscrmod user-60=athenare user-61=connect9 user-62=vantagep user-63=ulsukarm user-64=jarvisin user-65=hodgesonweb user-66=theblack user-67=spectrum user-68=still user-69=agproduc user-70=leereyn1 user-71=stephani user-72=nove user-73=boldover user-74=sosevalu user-75=crrtipdl user-76=bakery user-77=what user-78=oubpgvbx user-79=tstardom user-80=nvihkvu user-81=sketchy user-82=cath user-83=havantho user-84=kategilpin user-85=ladburyp user-86=dancinggardener user-87=stagingerris user-88=design user-89=tomandle user-90=jennimil user-91=mcdermos user-92=chrisdal user-93=nbhavers user-94=careers user-95=david user-96=attlebor user-97=lucy user-98=onlycont user-99=branko user-100=ranxterc user-101=hodgsonmail
Sep 15 10:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=outdoorc user-103=romaldki user-104=fortunaz user-105=health2045 user-106=leftie user-107=foods user-108=putterfc user-109=nscdp user-110=ctedorgu user-111=philmcph user-112=steakbridieme user-113=donnychicago user-114=firstre5 user-115=lkpier user-116=isleofwi user-117=smrszyqg user-118=tigerlet user-119=barbersh user-120=hidden user-121=nomistakes user-122=ninejimm user-123=reliable user-124=cambria1 user-125=cathski user-126=paulmca1 user-127=pugwash user-128=howardon user-129=cwsocial user-130=hirefootballgame user-131=courseme user-132=eugincou user-133=asandcoc user-134=sibtoncc user-135=zebrapho user-136=bwppodcast user-137=steve user-138=burydropin user-139=fawcettd user-140=nsceres user-141=eatspam user-142=darkstar user-143=beauty user-144=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 15 10:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 10:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:00 nativespace-cdp sudo[2216442]: pam_unix(sudo:session): session closed for user root
Sep 15 10:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 10:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:02 nativespace-cdp sudo[2216543]: pam_unix(sudo:session): session closed for user root
Sep 15 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s85oENNOejp1Vkm3.~
Sep 15 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:03 nativespace-cdp sudo[2216550]: pam_unix(sudo:session): session closed for user root
Sep 15 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s85oENNOejp1Vkm3.~'
Sep 15 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:03 nativespace-cdp sudo[2216554]: pam_unix(sudo:session): session closed for user root
Sep 15 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-s85oENNOejp1Vkm3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:03 nativespace-cdp sudo[2216558]: pam_unix(sudo:session): session closed for user root
Sep 15 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:03 nativespace-cdp sudo[2216561]: pam_unix(sudo:session): session closed for user root
Sep 15 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 10:10:06 nativespace-cdp sudo[2216612]: pam_unix(sudo:session): session closed for user root
Sep 15 10:11:36 nativespace-cdp sshd[2217034]: Connection closed by 159.100.136.21 port 34156 [preauth]
Sep 15 10:16:33 nativespace-cdp sshd[2218281]: Connection closed by 159.100.136.21 port 43574 [preauth]
Sep 15 10:21:33 nativespace-cdp sshd[2219937]: Connection closed by 159.100.136.21 port 53034 [preauth]
Sep 15 10:26:36 nativespace-cdp sshd[2221122]: Connection closed by 159.100.136.21 port 34070 [preauth]
Sep 15 10:31:36 nativespace-cdp sshd[2222541]: Connection closed by 159.100.136.21 port 43590 [preauth]
Sep 15 10:36:36 nativespace-cdp sshd[2223908]: Connection closed by 159.100.136.21 port 53322 [preauth]
Sep 15 10:41:33 nativespace-cdp sshd[2225058]: Connection closed by 159.100.136.21 port 34118 [preauth]
Sep 15 10:46:33 nativespace-cdp sshd[2226508]: Connection closed by 159.100.136.21 port 43772 [preauth]
Sep 15 10:51:34 nativespace-cdp sshd[2227978]: Connection closed by 159.100.136.21 port 51634 [preauth]
Sep 15 11:01:33 nativespace-cdp sshd[2230750]: Connection closed by 159.100.136.21 port 42248 [preauth]
Sep 15 11:06:33 nativespace-cdp sshd[2231973]: Connection closed by 159.100.136.21 port 50534 [preauth]
Sep 15 11:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 11:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:13 nativespace-cdp sudo[2232473]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 11:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:13 nativespace-cdp sudo[2232479]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 11:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:14 nativespace-cdp sudo[2232482]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 11:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:14 nativespace-cdp sudo[2232491]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 11:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232494]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232555]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232558]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232561]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232564]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232567]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:30 nativespace-cdp sudo[2232570]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:48 nativespace-cdp sudo[2232628]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:50 nativespace-cdp sudo[2232635]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=putterfi user-2=hubmaster user-3=fetch user-4=carsinyo user-5=milloyco user-6=gilpin user-7=elecleis user-8=connectedshoppin user-9=thqkgnbz user-10=accooper user-11=ianrayne user-12=coursemc user-13=opaiscyx user-14=ultbcrra user-15=seftvta user-16=jonhartl user-17=firstres user-18=firstred user-19=highlegh user-20=southlon user-21=clarkass user-22=firstrel user-23=costestimatorco user-24=alexadmin user-25=skyfirec user-26=nativene user-27=innovat1 user-28=stuartge user-29=askhform user-30=vivienn1 user-31=firstre2 user-32=oneoarco user-33=battlere user-34=nstriton user-35=brighto1 user-36=newstoda user-37=ggaaorgu user-38=belle user-39=bemadonn user-40=bedfords user-41=spectrum user-42=theblack user-43=hodgesonweb user-44=jarvisin user-45=stephani user-46=leereyn1 user-47=agproduc
Sep 15 11:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=still user-49=vantagep user-50=connect9 user-51=athenare user-52=lbscrmod user-53=maflemin user-54=booff user-55=markward user-56=foundation user-57=ulsukarm user-58=dickemery123 user-59=ptkxhsbt user-60=martsblo user-61=magichat user-62=hhdugcor user-63=lbhyisi user-64=strathar user-65=atestord user-66=sarafoundation user-67=brmrjxl user-68=lakesan1 user-69=megacards user-70=musorguk user-71=wilsonsw user-72=onlycont user-73=lucy user-74=attlebor user-75=romaldki user-76=outdoorc user-77=hodgsonmail user-78=ranxterc user-79=branko user-80=jennimil user-81=tomandle user-82=david user-83=careers user-84=nbhavers user-85=chrisdal user-86=mcdermos user-87=havantho user-88=sketchy user-89=cath user-90=nvihkvu user-91=oubpgvbx user-92=tstardom user-93=what user-94=design user-95=dancinggardener user-96=stagingerris user-97=ladburyp user-98=kategilpin user-99=boldover user-100=nove user-101=bakery
Sep 15 11:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=sosevalu user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=beauty user-109=darkstar user-110=eatspam user-111=sibtoncc user-112=asandcoc user-113=steve user-114=bwppodcast user-115=zebrapho user-116=cwsocial user-117=pugwash user-118=paulmca1 user-119=howardon user-120=cathski user-121=cambria1 user-122=reliable user-123=ninejimm user-124=eugincou user-125=courseme user-126=hirefootballgame user-127=lkpier user-128=steakbridieme user-129=firstre5 user-130=donnychicago user-131=philmcph user-132=ctedorgu user-133=nscdp user-134=putterfc user-135=leftie user-136=foods user-137=health2045 user-138=fortunaz user-139=nomistakes user-140=hidden user-141=tigerlet user-142=barbersh user-143=smrszyqg user-144=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 15 11:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 11:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:51 nativespace-cdp sudo[2232652]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 15 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:53 nativespace-cdp sudo[2232669]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 15 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 15 11:09:53 nativespace-cdp sudo[2232675]: pam_unix(sudo:session): session closed for user onlycont
Sep 15 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 15 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:54 nativespace-cdp sudo[2232689]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 15 11:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 11:09:54 nativespace-cdp sudo[2232694]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 15 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:56 nativespace-cdp sudo[2232715]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 15 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 15 11:09:56 nativespace-cdp sudo[2232721]: pam_unix(sudo:session): session closed for user lkpier
Sep 15 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 15 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:57 nativespace-cdp sudo[2232735]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 15 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 15 11:09:57 nativespace-cdp sudo[2232745]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 15 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 15 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 15 11:09:58 nativespace-cdp sudo[2232758]: pam_unix(sudo:session): session closed for user oneoarco
Sep 15 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 15 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:58 nativespace-cdp sudo[2232771]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 15 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 15 11:09:58 nativespace-cdp sudo[2232778]: pam_unix(sudo:session): session closed for user fortunaz
Sep 15 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 15 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:59 nativespace-cdp sudo[2232790]: pam_unix(sudo:session): session closed for user root
Sep 15 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:09:59 nativespace-cdp sudo[2232794]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 15 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:22 nativespace-cdp sudo[2233875]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 15 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:22 nativespace-cdp sudo[2233880]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:24 nativespace-cdp sudo[2233887]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UefKpQvkva1GGXqh.~
Sep 15 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:24 nativespace-cdp sudo[2233891]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UefKpQvkva1GGXqh.~'
Sep 15 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:24 nativespace-cdp sudo[2233894]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UefKpQvkva1GGXqh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:24 nativespace-cdp sudo[2233899]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:24 nativespace-cdp sudo[2233902]: pam_unix(sudo:session): session closed for user root
Sep 15 11:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 11:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 11:10:26 nativespace-cdp sudo[2233915]: pam_unix(sudo:session): session closed for user root
Sep 15 11:11:33 nativespace-cdp sshd[2234313]: Connection closed by 159.100.136.21 port 59898 [preauth]
Sep 15 11:16:33 nativespace-cdp sshd[2235484]: Connection closed by 159.100.136.21 port 40996 [preauth]
Sep 15 11:21:33 nativespace-cdp sshd[2236851]: Connection closed by 159.100.136.21 port 50448 [preauth]
Sep 15 11:26:33 nativespace-cdp sshd[2238180]: Connection closed by 159.100.136.21 port 58920 [preauth]
Sep 15 11:31:35 nativespace-cdp sshd[2239927]: Connection closed by 159.100.136.21 port 40472 [preauth]
Sep 15 11:36:33 nativespace-cdp sshd[2241106]: Connection closed by 159.100.136.21 port 50100 [preauth]
Sep 15 11:41:35 nativespace-cdp sshd[2242268]: Connection closed by 159.100.136.21 port 59392 [preauth]
Sep 15 11:46:33 nativespace-cdp sshd[2243697]: Connection closed by 159.100.136.21 port 40606 [preauth]
Sep 15 11:51:33 nativespace-cdp sshd[2245102]: Connection closed by 159.100.136.21 port 49646 [preauth]
Sep 15 11:56:33 nativespace-cdp sshd[2246352]: Connection closed by 159.100.136.21 port 59340 [preauth]
Sep 15 12:01:33 nativespace-cdp sshd[2247920]: Connection closed by 159.100.136.21 port 40698 [preauth]
Sep 15 12:06:33 nativespace-cdp sshd[2249310]: Connection closed by 159.100.136.21 port 50496 [preauth]
Sep 15 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:29 nativespace-cdp sudo[2249825]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:29 nativespace-cdp sudo[2249828]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:35 nativespace-cdp sudo[2249831]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 12:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:35 nativespace-cdp sudo[2249848]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 12:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249852]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249877]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249882]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249886]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249892]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249898]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:42 nativespace-cdp sudo[2249903]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:47 nativespace-cdp sudo[2249923]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:48 nativespace-cdp sudo[2249931]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=steve user-4=zebrapho user-5=bwppodcast user-6=nsceres user-7=fawcettd user-8=burydropin user-9=dhyana user-10=darkstar user-11=eatspam user-12=beauty user-13=donnychicago user-14=steakbridieme user-15=firstre5 user-16=philmcph user-17=ctedorgu user-18=lkpier user-19=foods user-20=leftie user-21=fortunaz user-22=health2045 user-23=nscdp user-24=putterfc user-25=tigerlet user-26=barbersh user-27=nomistakes user-28=hidden user-29=isleofwi user-30=smrszyqg user-31=cwsocial user-32=howardon user-33=paulmca1 user-34=pugwash user-35=reliable user-36=ninejimm user-37=cambria1 user-38=cathski user-39=courseme user-40=eugincou user-41=hirefootballgame user-42=jennimil user-43=tomandle user-44=david user-45=careers user-46=nbhavers user-47=mcdermos user-48=chrisdal
Sep 15 12:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=onlycont user-50=lucy user-51=attlebor user-52=romaldki user-53=branko user-54=ranxterc user-55=outdoorc user-56=hodgsonmail user-57=boldover user-58=nove user-59=crrtipdl user-60=sosevalu user-61=bakery user-62=nvihkvu user-63=havantho user-64=sketchy user-65=cath user-66=what user-67=oubpgvbx user-68=tstardom user-69=design user-70=kategilpin user-71=dancinggardener user-72=stagingerris user-73=ladburyp user-74=lbscrmod user-75=maflemin user-76=vantagep user-77=connect9 user-78=athenare user-79=markward user-80=foundation user-81=booff user-82=ulsukarm user-83=hodgesonweb user-84=theblack user-85=spectrum user-86=jarvisin user-87=leereyn1 user-88=stephani user-89=agproduc user-90=still user-91=atestord user-92=sarafoundation user-93=strathar user-94=brmrjxl user-95=lakesan1 user-96=megacards user-97=musorguk user-98=wilsonsw user-99=ptkxhsbt user-100=dickemery123 user-101=martsblo user-102=magichat
Sep 15 12:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=hhdugcor user-104=lbhyisi user-105=opaiscyx user-106=coursemc user-107=firstres user-108=ultbcrra user-109=seftvta user-110=jonhartl user-111=highlegh user-112=southlon user-113=firstred user-114=costestimatorco user-115=clarkass user-116=firstrel user-117=fetch user-118=carsinyo user-119=putterfi user-120=hubmaster user-121=elecleis user-122=milloyco user-123=gilpin user-124=thqkgnbz user-125=connectedshoppin user-126=ianrayne user-127=accooper user-128=oneoarco user-129=battlere user-130=vivienn1 user-131=firstre2 user-132=nstriton user-133=brighto1 user-134=bemadonn user-135=newstoda user-136=ggaaorgu user-137=belle user-138=bedfords user-139=alexadmin user-140=skyfirec user-141=nativene user-142=stuartge user-143=askhform user-144=innovat1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 12:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 12:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:49 nativespace-cdp sudo[2249943]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:50 nativespace-cdp sudo[2249952]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pW43DXAuck97n9UH.~
Sep 15 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:50 nativespace-cdp sudo[2249957]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pW43DXAuck97n9UH.~'
Sep 15 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:50 nativespace-cdp sudo[2249961]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-pW43DXAuck97n9UH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:50 nativespace-cdp sudo[2249967]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:50 nativespace-cdp sudo[2249972]: pam_unix(sudo:session): session closed for user root
Sep 15 12:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 12:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 12:09:58 nativespace-cdp sudo[2250018]: pam_unix(sudo:session): session closed for user root
Sep 15 12:11:33 nativespace-cdp sshd[2250560]: Connection closed by 159.100.136.21 port 59146 [preauth]
Sep 15 12:16:33 nativespace-cdp sshd[2252092]: Connection closed by 159.100.136.21 port 40202 [preauth]
Sep 15 12:21:36 nativespace-cdp sshd[2253227]: Connection closed by 159.100.136.21 port 48894 [preauth]
Sep 15 12:26:36 nativespace-cdp sshd[2254270]: Connection closed by 159.100.136.21 port 58678 [preauth]
Sep 15 12:31:36 nativespace-cdp sshd[2255737]: Connection closed by 159.100.136.21 port 39948 [preauth]
Sep 15 12:36:33 nativespace-cdp sshd[2256944]: Connection closed by 159.100.136.21 port 48534 [preauth]
Sep 15 12:41:36 nativespace-cdp sshd[2258016]: Connection closed by 159.100.136.21 port 57222 [preauth]
Sep 15 12:46:36 nativespace-cdp sshd[2259037]: Connection closed by 159.100.136.21 port 38332 [preauth]
Sep 15 12:51:33 nativespace-cdp sshd[2260424]: Connection closed by 159.100.136.21 port 47756 [preauth]
Sep 15 12:56:33 nativespace-cdp sshd[2261563]: Connection closed by 159.100.136.21 port 57252 [preauth]
Sep 15 13:01:37 nativespace-cdp sshd[2263154]: Connection closed by 159.100.136.21 port 38346 [preauth]
Sep 15 13:06:37 nativespace-cdp sshd[2264233]: Connection closed by 159.100.136.21 port 47998 [preauth]
Sep 15 13:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:00 nativespace-cdp sudo[2265067]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:00 nativespace-cdp sudo[2265075]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:43 nativespace-cdp sudo[2265078]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 13:10:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:43 nativespace-cdp sudo[2265358]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 13:10:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:52 nativespace-cdp sudo[2265363]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 13:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:52 nativespace-cdp sudo[2265438]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 13:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:52 nativespace-cdp sudo[2265446]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 13:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:52 nativespace-cdp sudo[2265450]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 13:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:52 nativespace-cdp sudo[2265465]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 13:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:53 nativespace-cdp sudo[2265471]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 13:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:53 nativespace-cdp sudo[2265477]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 13:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:56 nativespace-cdp sudo[2265495]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 13:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:10:59 nativespace-cdp sudo[2265502]: pam_unix(sudo:session): session closed for user root
Sep 15 13:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cathski user-2=cambria1 user-3=reliable user-4=ninejimm user-5=cwsocial user-6=howardon user-7=paulmca1 user-8=pugwash user-9=hirefootballgame user-10=eugincou user-11=courseme user-12=nscdp user-13=putterfc user-14=leftie user-15=foods user-16=health2045 user-17=fortunaz user-18=lkpier user-19=steakbridieme user-20=donnychicago user-21=firstre5 user-22=ctedorgu user-23=philmcph user-24=smrszyqg user-25=isleofwi user-26=nomistakes user-27=hidden user-28=tigerlet user-29=barbersh user-30=fawcettd user-31=burydropin user-32=nsceres user-33=beauty user-34=darkstar user-35=eatspam user-36=dhyana user-37=sibtoncc user-38=asandcoc user-39=bwppodcast user-40=zebrapho user-41=steve user-42=tstardom user-43=oubpgvbx user-44=what user-45=havantho user-46=cath user-47=sketchy user-48=nvihkvu
Sep 15 13:10:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=dancinggardener user-50=stagingerris user-51=ladburyp user-52=kategilpin user-53=design user-54=nove user-55=boldover user-56=bakery user-57=crrtipdl user-58=sosevalu user-59=lucy user-60=attlebor user-61=onlycont user-62=outdoorc user-63=hodgsonmail user-64=ranxterc user-65=branko user-66=romaldki user-67=tomandle user-68=jennimil user-69=chrisdal user-70=mcdermos user-71=david user-72=nbhavers user-73=careers user-74=martsblo user-75=dickemery123 user-76=ptkxhsbt user-77=hhdugcor user-78=lbhyisi user-79=magichat user-80=lakesan1 user-81=brmrjxl user-82=strathar user-83=atestord user-84=sarafoundation user-85=wilsonsw user-86=megacards user-87=musorguk user-88=jarvisin user-89=spectrum user-90=theblack user-91=hodgesonweb user-92=agproduc user-93=still user-94=stephani user-95=leereyn1 user-96=foundation user-97=markward user-98=booff user-99=vantagep user-100=athenare user-101=connect9 user-102=lbscrmod
Sep 15 13:10:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=maflemin user-104=ulsukarm user-105=alexadmin user-106=skyfirec user-107=innovat1 user-108=askhform user-109=stuartge user-110=nativene user-111=nstriton user-112=brighto1 user-113=vivienn1 user-114=firstre2 user-115=oneoarco user-116=battlere user-117=bedfords user-118=newstoda user-119=belle user-120=ggaaorgu user-121=bemadonn user-122=gilpin user-123=milloyco user-124=elecleis user-125=putterfi user-126=hubmaster user-127=fetch user-128=carsinyo user-129=accooper user-130=ianrayne user-131=connectedshoppin user-132=thqkgnbz user-133=ultbcrra user-134=jonhartl user-135=seftvta user-136=firstres user-137=coursemc user-138=opaiscyx user-139=clarkass user-140=firstrel user-141=costestimatorco user-142=firstred user-143=highlegh user-144=southlon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 13:10:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 13:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:00 nativespace-cdp sudo[2265524]: pam_unix(sudo:session): session closed for user root
Sep 15 13:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 13:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:01 nativespace-cdp sudo[2265549]: pam_unix(sudo:session): session closed for user root
Sep 15 13:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VWQJZw07Wyvg5pL4.~
Sep 15 13:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:01 nativespace-cdp sudo[2265553]: pam_unix(sudo:session): session closed for user root
Sep 15 13:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VWQJZw07Wyvg5pL4.~'
Sep 15 13:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:01 nativespace-cdp sudo[2265557]: pam_unix(sudo:session): session closed for user root
Sep 15 13:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VWQJZw07Wyvg5pL4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 13:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:01 nativespace-cdp sudo[2265563]: pam_unix(sudo:session): session closed for user root
Sep 15 13:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 13:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:01 nativespace-cdp sudo[2265567]: pam_unix(sudo:session): session closed for user root
Sep 15 13:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 13:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 13:11:05 nativespace-cdp sudo[2265596]: pam_unix(sudo:session): session closed for user root
Sep 15 13:14:10 nativespace-cdp crond[2265696]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Sep 15 13:14:10 nativespace-cdp crond[2265695]: pam_systemd(crond:session): Failed to create session: Input/output error
Sep 15 13:14:10 nativespace-cdp sshd[2265666]: Did not receive identification string from 159.100.136.21 port 57354
Sep 15 13:16:33 nativespace-cdp sshd[2268555]: Connection closed by 159.100.136.21 port 38580 [preauth]
Sep 15 13:21:33 nativespace-cdp sshd[2271000]: Connection closed by 159.100.136.21 port 47582 [preauth]
Sep 15 13:26:33 nativespace-cdp sshd[2273783]: Connection closed by 159.100.136.21 port 57268 [preauth]
Sep 15 13:31:33 nativespace-cdp sshd[2276148]: Connection closed by 159.100.136.21 port 38624 [preauth]
Sep 15 13:36:33 nativespace-cdp sshd[2278939]: Connection closed by 159.100.136.21 port 47552 [preauth]
Sep 15 13:41:33 nativespace-cdp sshd[2280421]: Connection closed by 159.100.136.21 port 56932 [preauth]
Sep 15 13:46:33 nativespace-cdp sshd[2282279]: Connection closed by 159.100.136.21 port 38222 [preauth]
Sep 15 13:50:40 nativespace-cdp sshd[2283090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.45.206  user=root
Sep 15 13:50:40 nativespace-cdp sshd[2283090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:50:42 nativespace-cdp sshd[2283090]: Failed password for root from 206.189.45.206 port 33976 ssh2
Sep 15 13:50:42 nativespace-cdp sshd[2283090]: Received disconnect from 206.189.45.206 port 33976:11: Bye Bye [preauth]
Sep 15 13:50:42 nativespace-cdp sshd[2283090]: Disconnected from 206.189.45.206 port 33976 [preauth]
Sep 15 13:51:14 nativespace-cdp sshd[2283254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.164.66.50  user=root
Sep 15 13:51:14 nativespace-cdp sshd[2283254]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:51:15 nativespace-cdp sshd[2283254]: Failed password for root from 210.164.66.50 port 35224 ssh2
Sep 15 13:51:24 nativespace-cdp sshd[2283254]: Received disconnect from 210.164.66.50 port 35224:11: Bye Bye [preauth]
Sep 15 13:51:24 nativespace-cdp sshd[2283254]: Disconnected from 210.164.66.50 port 35224 [preauth]
Sep 15 13:51:34 nativespace-cdp sshd[2283320]: Connection closed by 159.100.136.21 port 48062 [preauth]
Sep 15 13:53:39 nativespace-cdp sshd[2283872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.50.200.126  user=root
Sep 15 13:53:39 nativespace-cdp sshd[2283872]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:53:41 nativespace-cdp sshd[2283872]: Failed password for root from 181.50.200.126 port 43406 ssh2
Sep 15 13:53:41 nativespace-cdp sshd[2283872]: Received disconnect from 181.50.200.126 port 43406:11: Bye Bye [preauth]
Sep 15 13:53:41 nativespace-cdp sshd[2283872]: Disconnected from 181.50.200.126 port 43406 [preauth]
Sep 15 13:53:57 nativespace-cdp sshd[2283932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.12  user=root
Sep 15 13:53:57 nativespace-cdp sshd[2283932]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:53:59 nativespace-cdp sshd[2283932]: Failed password for root from 27.254.235.12 port 39486 ssh2
Sep 15 13:54:00 nativespace-cdp sshd[2283932]: Received disconnect from 27.254.235.12 port 39486:11: Bye Bye [preauth]
Sep 15 13:54:00 nativespace-cdp sshd[2283932]: Disconnected from 27.254.235.12 port 39486 [preauth]
Sep 15 13:54:15 nativespace-cdp sshd[2284016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.48.66.231  user=root
Sep 15 13:54:15 nativespace-cdp sshd[2284016]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:54:17 nativespace-cdp sshd[2284016]: Failed password for root from 74.48.66.231 port 11212 ssh2
Sep 15 13:54:24 nativespace-cdp sshd[2284016]: Connection reset by 74.48.66.231 port 11212 [preauth]
Sep 15 13:54:52 nativespace-cdp sshd[2284150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.79.91  user=root
Sep 15 13:54:52 nativespace-cdp sshd[2284150]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:54:54 nativespace-cdp sshd[2284166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.71.253.45  user=root
Sep 15 13:54:54 nativespace-cdp sshd[2284166]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:54:55 nativespace-cdp sshd[2284150]: Failed password for root from 168.232.79.91 port 38694 ssh2
Sep 15 13:54:55 nativespace-cdp sshd[2284150]: Received disconnect from 168.232.79.91 port 38694:11: Bye Bye [preauth]
Sep 15 13:54:55 nativespace-cdp sshd[2284150]: Disconnected from 168.232.79.91 port 38694 [preauth]
Sep 15 13:54:56 nativespace-cdp sshd[2284166]: Failed password for root from 109.71.253.45 port 64007 ssh2
Sep 15 13:54:56 nativespace-cdp sshd[2284166]: Received disconnect from 109.71.253.45 port 64007:11: Bye Bye [preauth]
Sep 15 13:54:56 nativespace-cdp sshd[2284166]: Disconnected from 109.71.253.45 port 64007 [preauth]
Sep 15 13:55:23 nativespace-cdp sshd[2284353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.10.40.158  user=root
Sep 15 13:55:23 nativespace-cdp sshd[2284353]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:55:26 nativespace-cdp sshd[2284353]: Failed password for root from 202.10.40.158 port 39350 ssh2
Sep 15 13:55:26 nativespace-cdp sshd[2284353]: Received disconnect from 202.10.40.158 port 39350:11: Bye Bye [preauth]
Sep 15 13:55:26 nativespace-cdp sshd[2284353]: Disconnected from 202.10.40.158 port 39350 [preauth]
Sep 15 13:56:33 nativespace-cdp sshd[2284546]: Connection closed by 159.100.136.21 port 57612 [preauth]
Sep 15 13:57:56 nativespace-cdp sshd[2284825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.71.253.45  user=root
Sep 15 13:57:56 nativespace-cdp sshd[2284825]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:57:58 nativespace-cdp sshd[2284825]: Failed password for root from 109.71.253.45 port 15689 ssh2
Sep 15 13:58:05 nativespace-cdp sshd[2284825]: Received disconnect from 109.71.253.45 port 15689:11: Bye Bye [preauth]
Sep 15 13:58:05 nativespace-cdp sshd[2284825]: Disconnected from 109.71.253.45 port 15689 [preauth]
Sep 15 13:58:15 nativespace-cdp sshd[2284884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.79.91  user=root
Sep 15 13:58:15 nativespace-cdp sshd[2284884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:58:16 nativespace-cdp sshd[2284884]: Failed password for root from 168.232.79.91 port 38796 ssh2
Sep 15 13:58:17 nativespace-cdp sshd[2284884]: Received disconnect from 168.232.79.91 port 38796:11: Bye Bye [preauth]
Sep 15 13:58:17 nativespace-cdp sshd[2284884]: Disconnected from 168.232.79.91 port 38796 [preauth]
Sep 15 13:58:26 nativespace-cdp sshd[2284909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.45.206  user=root
Sep 15 13:58:26 nativespace-cdp sshd[2284909]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:58:27 nativespace-cdp sshd[2284909]: Failed password for root from 206.189.45.206 port 43548 ssh2
Sep 15 13:58:27 nativespace-cdp sshd[2284909]: Received disconnect from 206.189.45.206 port 43548:11: Bye Bye [preauth]
Sep 15 13:58:27 nativespace-cdp sshd[2284909]: Disconnected from 206.189.45.206 port 43548 [preauth]
Sep 15 13:58:29 nativespace-cdp sshd[2284917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.12  user=root
Sep 15 13:58:29 nativespace-cdp sshd[2284917]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:58:31 nativespace-cdp sshd[2284917]: Failed password for root from 27.254.235.12 port 46066 ssh2
Sep 15 13:58:31 nativespace-cdp sshd[2284917]: Received disconnect from 27.254.235.12 port 46066:11: Bye Bye [preauth]
Sep 15 13:58:31 nativespace-cdp sshd[2284917]: Disconnected from 27.254.235.12 port 46066 [preauth]
Sep 15 13:58:36 nativespace-cdp sshd[2284930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.71.253.45  user=root
Sep 15 13:58:36 nativespace-cdp sshd[2284930]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:58:38 nativespace-cdp sshd[2284930]: Failed password for root from 109.71.253.45 port 30446 ssh2
Sep 15 13:58:40 nativespace-cdp sshd[2284930]: Received disconnect from 109.71.253.45 port 30446:11: Bye Bye [preauth]
Sep 15 13:58:40 nativespace-cdp sshd[2284930]: Disconnected from 109.71.253.45 port 30446 [preauth]
Sep 15 13:58:41 nativespace-cdp sshd[2284946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.50.200.126  user=root
Sep 15 13:58:41 nativespace-cdp sshd[2284946]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:58:43 nativespace-cdp sshd[2284946]: Failed password for root from 181.50.200.126 port 42898 ssh2
Sep 15 13:58:43 nativespace-cdp sshd[2284946]: Received disconnect from 181.50.200.126 port 42898:11: Bye Bye [preauth]
Sep 15 13:58:43 nativespace-cdp sshd[2284946]: Disconnected from 181.50.200.126 port 42898 [preauth]
Sep 15 13:59:03 nativespace-cdp sshd[2285039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.79.91  user=root
Sep 15 13:59:03 nativespace-cdp sshd[2285039]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:59:05 nativespace-cdp sshd[2285039]: Failed password for root from 168.232.79.91 port 38832 ssh2
Sep 15 13:59:05 nativespace-cdp sshd[2285039]: Received disconnect from 168.232.79.91 port 38832:11: Bye Bye [preauth]
Sep 15 13:59:05 nativespace-cdp sshd[2285039]: Disconnected from 168.232.79.91 port 38832 [preauth]
Sep 15 13:59:15 nativespace-cdp sshd[2285090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.45.206  user=root
Sep 15 13:59:15 nativespace-cdp sshd[2285090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:59:17 nativespace-cdp sshd[2285090]: Failed password for root from 206.189.45.206 port 50864 ssh2
Sep 15 13:59:17 nativespace-cdp sshd[2285090]: Received disconnect from 206.189.45.206 port 50864:11: Bye Bye [preauth]
Sep 15 13:59:17 nativespace-cdp sshd[2285090]: Disconnected from 206.189.45.206 port 50864 [preauth]
Sep 15 13:59:20 nativespace-cdp sshd[2285127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.235.12  user=root
Sep 15 13:59:20 nativespace-cdp sshd[2285127]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:59:23 nativespace-cdp sshd[2285127]: Failed password for root from 27.254.235.12 port 58672 ssh2
Sep 15 13:59:23 nativespace-cdp sshd[2285127]: Received disconnect from 27.254.235.12 port 58672:11: Bye Bye [preauth]
Sep 15 13:59:23 nativespace-cdp sshd[2285127]: Disconnected from 27.254.235.12 port 58672 [preauth]
Sep 15 13:59:27 nativespace-cdp sshd[2285166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.50.200.126  user=root
Sep 15 13:59:27 nativespace-cdp sshd[2285166]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 13:59:29 nativespace-cdp sshd[2285166]: Failed password for root from 181.50.200.126 port 40414 ssh2
Sep 15 13:59:29 nativespace-cdp sshd[2285166]: Received disconnect from 181.50.200.126 port 40414:11: Bye Bye [preauth]
Sep 15 13:59:29 nativespace-cdp sshd[2285166]: Disconnected from 181.50.200.126 port 40414 [preauth]
Sep 15 14:00:32 nativespace-cdp sshd[2285590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.48.66.231  user=root
Sep 15 14:00:32 nativespace-cdp sshd[2285590]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 14:00:34 nativespace-cdp sshd[2285590]: Failed password for root from 74.48.66.231 port 55172 ssh2
Sep 15 14:00:36 nativespace-cdp sshd[2285590]: Received disconnect from 74.48.66.231 port 55172:11: Bye Bye [preauth]
Sep 15 14:00:36 nativespace-cdp sshd[2285590]: Disconnected from 74.48.66.231 port 55172 [preauth]
Sep 15 14:01:21 nativespace-cdp sshd[2286018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.48.66.231  user=root
Sep 15 14:01:21 nativespace-cdp sshd[2286018]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 14:01:23 nativespace-cdp sshd[2286018]: Failed password for root from 74.48.66.231 port 64132 ssh2
Sep 15 14:01:33 nativespace-cdp sshd[2286157]: Connection closed by 159.100.136.21 port 38728 [preauth]
Sep 15 14:03:22 nativespace-cdp sshd[2286590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.10.40.158  user=root
Sep 15 14:03:22 nativespace-cdp sshd[2286590]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 14:03:23 nativespace-cdp sshd[2286590]: Failed password for root from 202.10.40.158 port 35694 ssh2
Sep 15 14:03:24 nativespace-cdp sshd[2286590]: Received disconnect from 202.10.40.158 port 35694:11: Bye Bye [preauth]
Sep 15 14:03:24 nativespace-cdp sshd[2286590]: Disconnected from 202.10.40.158 port 35694 [preauth]
Sep 15 14:03:55 nativespace-cdp sshd[2286692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.164.66.50  user=root
Sep 15 14:03:55 nativespace-cdp sshd[2286692]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 14:03:57 nativespace-cdp sshd[2286692]: Failed password for root from 210.164.66.50 port 47392 ssh2
Sep 15 14:03:57 nativespace-cdp sshd[2286692]: Received disconnect from 210.164.66.50 port 47392:11: Bye Bye [preauth]
Sep 15 14:03:57 nativespace-cdp sshd[2286692]: Disconnected from 210.164.66.50 port 47392 [preauth]
Sep 15 14:05:06 nativespace-cdp sshd[2286884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.10.40.158  user=root
Sep 15 14:05:06 nativespace-cdp sshd[2286884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 14:05:07 nativespace-cdp sshd[2286884]: Failed password for root from 202.10.40.158 port 49674 ssh2
Sep 15 14:05:41 nativespace-cdp sshd[2287107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.164.66.50  user=root
Sep 15 14:05:41 nativespace-cdp sshd[2287107]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 14:05:43 nativespace-cdp sshd[2287107]: Failed password for root from 210.164.66.50 port 46802 ssh2
Sep 15 14:06:36 nativespace-cdp sshd[2287515]: Connection closed by 159.100.136.21 port 48686 [preauth]
Sep 15 14:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 14:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:31 nativespace-cdp sudo[2288149]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 14:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:31 nativespace-cdp sudo[2288153]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 14:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:34 nativespace-cdp sudo[2288157]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 14:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:34 nativespace-cdp sudo[2288176]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 14:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288183]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288198]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288203]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288207]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288212]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288218]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:38 nativespace-cdp sudo[2288223]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 14:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:40 nativespace-cdp sudo[2288234]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 14:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:41 nativespace-cdp sudo[2288241]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=lakesan1 user-5=brmrjxl user-6=strathar user-7=atestord user-8=sarafoundation user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=dickemery123 user-14=ptkxhsbt user-15=ulsukarm user-16=booff user-17=markward user-18=foundation user-19=vantagep user-20=athenare user-21=connect9 user-22=lbscrmod user-23=maflemin user-24=agproduc user-25=still user-26=stephani user-27=leereyn1 user-28=jarvisin user-29=spectrum user-30=hodgesonweb user-31=theblack user-32=bedfords user-33=newstoda user-34=belle user-35=ggaaorgu user-36=bemadonn user-37=nstriton user-38=brighto1 user-39=vivienn1 user-40=firstre2 user-41=oneoarco user-42=battlere user-43=innovat1 user-44=stuartge user-45=askhform user-46=nativene user-47=alexadmin user-48=skyfirec
Sep 15 14:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstrel user-50=clarkass user-51=costestimatorco user-52=firstred user-53=highlegh user-54=southlon user-55=ultbcrra user-56=jonhartl user-57=seftvta user-58=firstres user-59=opaiscyx user-60=coursemc user-61=accooper user-62=ianrayne user-63=connectedshoppin user-64=thqkgnbz user-65=milloyco user-66=gilpin user-67=elecleis user-68=hubmaster user-69=putterfi user-70=fetch user-71=carsinyo user-72=isleofwi user-73=smrszyqg user-74=nomistakes user-75=hidden user-76=barbersh user-77=tigerlet user-78=nscdp user-79=putterfc user-80=foods user-81=leftie user-82=fortunaz user-83=health2045 user-84=lkpier user-85=firstre5 user-86=donnychicago user-87=steakbridieme user-88=philmcph user-89=ctedorgu user-90=hirefootballgame user-91=eugincou user-92=courseme user-93=cathski user-94=cambria1 user-95=reliable user-96=ninejimm user-97=cwsocial user-98=paulmca1 user-99=pugwash user-100=howardon user-101=bwppodcast
Sep 15 14:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=steve user-104=asandcoc user-105=sibtoncc user-106=beauty user-107=darkstar user-108=eatspam user-109=dhyana user-110=fawcettd user-111=burydropin user-112=nsceres user-113=bakery user-114=crrtipdl user-115=sosevalu user-116=nove user-117=boldover user-118=stagingerris user-119=dancinggardener user-120=ladburyp user-121=kategilpin user-122=design user-123=tstardom user-124=oubpgvbx user-125=what user-126=havantho user-127=cath user-128=sketchy user-129=nvihkvu user-130=chrisdal user-131=mcdermos user-132=david user-133=careers user-134=nbhavers user-135=tomandle user-136=jennimil user-137=hodgsonmail user-138=outdoorc user-139=ranxterc user-140=branko user-141=romaldki user-142=lucy user-143=attlebor user-144=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 14:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:42 nativespace-cdp sudo[2288249]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:43 nativespace-cdp sudo[2288260]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UB9vAlGQjeDN4yTF.~
Sep 15 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:43 nativespace-cdp sudo[2288265]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UB9vAlGQjeDN4yTF.~'
Sep 15 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:43 nativespace-cdp sudo[2288269]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UB9vAlGQjeDN4yTF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:43 nativespace-cdp sudo[2288275]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:43 nativespace-cdp sudo[2288281]: pam_unix(sudo:session): session closed for user root
Sep 15 14:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 14:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 14:09:50 nativespace-cdp sudo[2288314]: pam_unix(sudo:session): session closed for user root
Sep 15 14:11:33 nativespace-cdp sshd[2288802]: Connection closed by 159.100.136.21 port 58228 [preauth]
Sep 15 14:16:35 nativespace-cdp sshd[2290325]: Connection closed by 159.100.136.21 port 39888 [preauth]
Sep 15 14:21:33 nativespace-cdp sshd[2291531]: Connection closed by 159.100.136.21 port 48312 [preauth]
Sep 15 14:26:33 nativespace-cdp sshd[2292578]: Connection closed by 159.100.136.21 port 58286 [preauth]
Sep 15 14:31:36 nativespace-cdp sshd[2294377]: Connection closed by 159.100.136.21 port 38978 [preauth]
Sep 15 14:36:33 nativespace-cdp sshd[2295516]: Connection closed by 159.100.136.21 port 48920 [preauth]
Sep 15 14:41:35 nativespace-cdp sshd[2296544]: Connection closed by 159.100.136.21 port 58306 [preauth]
Sep 15 14:46:33 nativespace-cdp sshd[2297609]: Connection closed by 159.100.136.21 port 39346 [preauth]
Sep 15 14:51:40 nativespace-cdp sshd[2298856]: Connection closed by 159.100.136.21 port 47504 [preauth]
Sep 15 14:56:35 nativespace-cdp sshd[2300162]: Connection closed by 159.100.136.21 port 57266 [preauth]
Sep 15 15:01:33 nativespace-cdp sshd[2301736]: Connection closed by 159.100.136.21 port 36782 [preauth]
Sep 15 15:06:34 nativespace-cdp sshd[2302773]: Connection closed by 159.100.136.21 port 46792 [preauth]
Sep 15 15:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 15:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:23 nativespace-cdp sudo[2303417]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 15:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:23 nativespace-cdp sudo[2303421]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 15:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:24 nativespace-cdp sudo[2303426]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 15:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:24 nativespace-cdp sudo[2303433]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 15:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:27 nativespace-cdp sudo[2303439]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:27 nativespace-cdp sudo[2303454]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 15:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:28 nativespace-cdp sudo[2303459]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 15:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:28 nativespace-cdp sudo[2303463]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 15:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:28 nativespace-cdp sudo[2303468]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 15:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:28 nativespace-cdp sudo[2303473]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 15:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:28 nativespace-cdp sudo[2303479]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 15:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:30 nativespace-cdp sudo[2303492]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 15:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:30 nativespace-cdp sudo[2303498]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=putterfi user-2=hubmaster user-3=fetch user-4=carsinyo user-5=milloyco user-6=gilpin user-7=elecleis user-8=connectedshoppin user-9=thqkgnbz user-10=accooper user-11=ianrayne user-12=coursemc user-13=opaiscyx user-14=ultbcrra user-15=seftvta user-16=jonhartl user-17=firstres user-18=firstred user-19=highlegh user-20=southlon user-21=clarkass user-22=firstrel user-23=costestimatorco user-24=alexadmin user-25=skyfirec user-26=nativene user-27=innovat1 user-28=askhform user-29=stuartge user-30=vivienn1 user-31=firstre2 user-32=oneoarco user-33=battlere user-34=nstriton user-35=brighto1 user-36=newstoda user-37=ggaaorgu user-38=belle user-39=bemadonn user-40=bedfords user-41=spectrum user-42=theblack user-43=hodgesonweb user-44=jarvisin user-45=stephani user-46=leereyn1 user-47=agproduc
Sep 15 15:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=still user-49=vantagep user-50=athenare user-51=connect9 user-52=lbscrmod user-53=maflemin user-54=booff user-55=markward user-56=foundation user-57=ulsukarm user-58=dickemery123 user-59=ptkxhsbt user-60=martsblo user-61=magichat user-62=hhdugcor user-63=lbhyisi user-64=strathar user-65=atestord user-66=sarafoundation user-67=brmrjxl user-68=lakesan1 user-69=megacards user-70=musorguk user-71=wilsonsw user-72=onlycont user-73=lucy user-74=attlebor user-75=romaldki user-76=ranxterc user-77=hodgsonmail user-78=outdoorc user-79=branko user-80=jennimil user-81=tomandle user-82=david user-83=nbhavers user-84=careers user-85=chrisdal user-86=mcdermos user-87=havantho user-88=sketchy user-89=cath user-90=nvihkvu user-91=oubpgvbx user-92=tstardom user-93=what user-94=design user-95=stagingerris user-96=dancinggardener user-97=ladburyp user-98=kategilpin user-99=boldover user-100=nove user-101=bakery
Sep 15 15:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=sosevalu user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=beauty user-109=darkstar user-110=eatspam user-111=asandcoc user-112=sibtoncc user-113=steve user-114=bwppodcast user-115=zebrapho user-116=cwsocial user-117=paulmca1 user-118=howardon user-119=pugwash user-120=cathski user-121=cambria1 user-122=reliable user-123=ninejimm user-124=eugincou user-125=courseme user-126=hirefootballgame user-127=lkpier user-128=steakbridieme user-129=donnychicago user-130=firstre5 user-131=ctedorgu user-132=philmcph user-133=nscdp user-134=putterfc user-135=foods user-136=leftie user-137=health2045 user-138=fortunaz user-139=nomistakes user-140=hidden user-141=barbersh user-142=tigerlet user-143=isleofwi user-144=smrszyqg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 15 15:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 15:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:31 nativespace-cdp sudo[2303505]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:31 nativespace-cdp sudo[2303515]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yhO44pWPTYHXaWJu.~
Sep 15 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:31 nativespace-cdp sudo[2303521]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yhO44pWPTYHXaWJu.~'
Sep 15 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:31 nativespace-cdp sudo[2303525]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yhO44pWPTYHXaWJu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:31 nativespace-cdp sudo[2303531]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:31 nativespace-cdp sudo[2303536]: pam_unix(sudo:session): session closed for user root
Sep 15 15:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 15:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 15:09:38 nativespace-cdp sudo[2303578]: pam_unix(sudo:session): session closed for user root
Sep 15 15:11:33 nativespace-cdp sshd[2304057]: Connection closed by 159.100.136.21 port 55870 [preauth]
Sep 15 15:16:35 nativespace-cdp sshd[2305183]: Connection closed by 159.100.136.21 port 36468 [preauth]
Sep 15 15:21:35 nativespace-cdp sshd[2306884]: Connection closed by 159.100.136.21 port 45228 [preauth]
Sep 15 15:26:33 nativespace-cdp sshd[2308367]: Connection closed by 159.100.136.21 port 54634 [preauth]
Sep 15 15:31:33 nativespace-cdp sshd[2309646]: Connection closed by 159.100.136.21 port 35778 [preauth]
Sep 15 15:36:33 nativespace-cdp sshd[2310903]: Connection closed by 159.100.136.21 port 43436 [preauth]
Sep 15 15:41:33 nativespace-cdp sshd[2312045]: Connection closed by 159.100.136.21 port 52320 [preauth]
Sep 15 15:46:34 nativespace-cdp sshd[2313458]: Connection closed by 159.100.136.21 port 33434 [preauth]
Sep 15 15:51:34 nativespace-cdp sshd[2315098]: Connection closed by 159.100.136.21 port 41644 [preauth]
Sep 15 15:56:33 nativespace-cdp sshd[2316155]: Connection closed by 159.100.136.21 port 50970 [preauth]
Sep 15 16:01:34 nativespace-cdp sshd[2317646]: Connection closed by 159.100.136.21 port 60222 [preauth]
Sep 15 16:06:34 nativespace-cdp sshd[2318966]: Connection closed by 159.100.136.21 port 41034 [preauth]
Sep 15 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:23 nativespace-cdp sudo[2319520]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:23 nativespace-cdp sudo[2319524]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:24 nativespace-cdp sudo[2319530]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:24 nativespace-cdp sudo[2319540]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:26 nativespace-cdp sudo[2319546]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:27 nativespace-cdp sudo[2319562]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:27 nativespace-cdp sudo[2319567]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:27 nativespace-cdp sudo[2319571]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:27 nativespace-cdp sudo[2319576]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:27 nativespace-cdp sudo[2319581]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:27 nativespace-cdp sudo[2319588]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 16:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:35 nativespace-cdp sudo[2319613]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:36 nativespace-cdp sudo[2319621]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=booff user-3=markward user-4=foundation user-5=vantagep user-6=athenare user-7=connect9 user-8=lbscrmod user-9=maflemin user-10=agproduc user-11=still user-12=stephani user-13=leereyn1 user-14=jarvisin user-15=spectrum user-16=hodgesonweb user-17=theblack user-18=wilsonsw user-19=megacards user-20=musorguk user-21=brmrjxl user-22=lakesan1 user-23=strathar user-24=atestord user-25=sarafoundation user-26=hhdugcor user-27=lbhyisi user-28=magichat user-29=martsblo user-30=dickemery123 user-31=ptkxhsbt user-32=clarkass user-33=firstrel user-34=costestimatorco user-35=firstred user-36=highlegh user-37=southlon user-38=ultbcrra user-39=seftvta user-40=jonhartl user-41=firstres user-42=coursemc user-43=opaiscyx user-44=accooper user-45=ianrayne user-46=connectedshoppin user-47=thqkgnbz
Sep 15 16:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=gilpin user-49=milloyco user-50=elecleis user-51=putterfi user-52=hubmaster user-53=fetch user-54=carsinyo user-55=bedfords user-56=newstoda user-57=belle user-58=ggaaorgu user-59=bemadonn user-60=nstriton user-61=brighto1 user-62=vivienn1 user-63=firstre2 user-64=oneoarco user-65=battlere user-66=innovat1 user-67=stuartge user-68=askhform user-69=nativene user-70=skyfirec user-71=alexadmin user-72=bwppodcast user-73=zebrapho user-74=steve user-75=asandcoc user-76=sibtoncc user-77=beauty user-78=darkstar user-79=eatspam user-80=dhyana user-81=fawcettd user-82=burydropin user-83=nsceres user-84=isleofwi user-85=smrszyqg user-86=nomistakes user-87=hidden user-88=tigerlet user-89=barbersh user-90=nscdp user-91=putterfc user-92=foods user-93=leftie user-94=fortunaz user-95=health2045 user-96=lkpier user-97=steakbridieme user-98=firstre5 user-99=donnychicago user-100=ctedorgu user-101=philmcph
Sep 15 16:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=eugincou user-104=courseme user-105=cambria1 user-106=cathski user-107=ninejimm user-108=reliable user-109=cwsocial user-110=paulmca1 user-111=pugwash user-112=howardon user-113=chrisdal user-114=mcdermos user-115=david user-116=nbhavers user-117=careers user-118=tomandle user-119=jennimil user-120=outdoorc user-121=ranxterc user-122=hodgsonmail user-123=branko user-124=romaldki user-125=lucy user-126=attlebor user-127=onlycont user-128=bakery user-129=crrtipdl user-130=sosevalu user-131=nove user-132=boldover user-133=dancinggardener user-134=stagingerris user-135=ladburyp user-136=kategilpin user-137=design user-138=tstardom user-139=oubpgvbx user-140=what user-141=havantho user-142=cath user-143=sketchy user-144=nvihkvu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 16:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:37 nativespace-cdp sudo[2319629]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:37 nativespace-cdp sudo[2319638]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DbffQOB77bkZ2rdr.~
Sep 15 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:37 nativespace-cdp sudo[2319643]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DbffQOB77bkZ2rdr.~'
Sep 15 16:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:38 nativespace-cdp sudo[2319647]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DbffQOB77bkZ2rdr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 16:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:38 nativespace-cdp sudo[2319653]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 16:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:38 nativespace-cdp sudo[2319659]: pam_unix(sudo:session): session closed for user root
Sep 15 16:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 16:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 16:09:39 nativespace-cdp sudo[2319680]: pam_unix(sudo:session): session closed for user root
Sep 15 16:11:33 nativespace-cdp sshd[2320153]: Connection closed by 159.100.136.21 port 49664 [preauth]
Sep 15 16:16:34 nativespace-cdp sshd[2321641]: Connection closed by 159.100.136.21 port 58942 [preauth]
Sep 15 16:21:33 nativespace-cdp sshd[2322792]: Connection closed by 159.100.136.21 port 39616 [preauth]
Sep 15 16:26:35 nativespace-cdp sshd[2323791]: Connection closed by 159.100.136.21 port 48600 [preauth]
Sep 15 16:31:33 nativespace-cdp sshd[2324909]: Connection closed by 159.100.136.21 port 57932 [preauth]
Sep 15 16:41:33 nativespace-cdp sshd[2327415]: Connection closed by 159.100.136.21 port 47334 [preauth]
Sep 15 16:46:33 nativespace-cdp sshd[2328929]: Connection closed by 159.100.136.21 port 56836 [preauth]
Sep 15 16:51:33 nativespace-cdp sshd[2329943]: Connection closed by 159.100.136.21 port 37742 [preauth]
Sep 15 16:56:34 nativespace-cdp sshd[2330911]: Connection closed by 159.100.136.21 port 47052 [preauth]
Sep 15 17:01:33 nativespace-cdp sshd[2332244]: Connection closed by 159.100.136.21 port 55602 [preauth]
Sep 15 17:06:33 nativespace-cdp sshd[2333498]: Connection closed by 159.100.136.21 port 35840 [preauth]
Sep 15 17:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:28 nativespace-cdp sudo[2334223]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:28 nativespace-cdp sudo[2334227]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:29 nativespace-cdp sudo[2334232]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 17:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:29 nativespace-cdp sudo[2334240]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 17:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:49 nativespace-cdp sudo[2334246]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 17:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:49 nativespace-cdp sudo[2334300]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 17:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:49 nativespace-cdp sudo[2334305]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 17:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:50 nativespace-cdp sudo[2334309]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 17:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:50 nativespace-cdp sudo[2334314]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 17:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:50 nativespace-cdp sudo[2334320]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 17:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:50 nativespace-cdp sudo[2334325]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:57 nativespace-cdp sudo[2334347]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:58 nativespace-cdp sudo[2334353]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=thqkgnbz user-2=connectedshoppin user-3=ianrayne user-4=accooper user-5=carsinyo user-6=fetch user-7=putterfi user-8=hubmaster user-9=elecleis user-10=gilpin user-11=milloyco user-12=southlon user-13=highlegh user-14=firstred user-15=costestimatorco user-16=clarkass user-17=firstrel user-18=opaiscyx user-19=coursemc user-20=firstres user-21=seftvta user-22=jonhartl user-23=ultbcrra user-24=nativene user-25=stuartge user-26=askhform user-27=innovat1 user-28=skyfirec user-29=alexadmin user-30=bemadonn user-31=ggaaorgu user-32=belle user-33=newstoda user-34=bedfords user-35=battlere user-36=oneoarco user-37=firstre2 user-38=vivienn1 user-39=brighto1 user-40=nstriton user-41=leereyn1 user-42=stephani user-43=still user-44=agproduc user-45=hodgesonweb user-46=theblack user-47=spectrum
Sep 15 17:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=jarvisin user-49=ulsukarm user-50=maflemin user-51=lbscrmod user-52=connect9 user-53=athenare user-54=vantagep user-55=markward user-56=foundation user-57=booff user-58=magichat user-59=lbhyisi user-60=hhdugcor user-61=ptkxhsbt user-62=dickemery123 user-63=martsblo user-64=musorguk user-65=megacards user-66=wilsonsw user-67=sarafoundation user-68=atestord user-69=strathar user-70=brmrjxl user-71=lakesan1 user-72=romaldki user-73=branko user-74=outdoorc user-75=hodgsonmail user-76=ranxterc user-77=onlycont user-78=attlebor user-79=lucy user-80=nbhavers user-81=careers user-82=david user-83=mcdermos user-84=chrisdal user-85=jennimil user-86=tomandle user-87=design user-88=kategilpin user-89=ladburyp user-90=stagingerris user-91=dancinggardener user-92=nvihkvu user-93=sketchy user-94=cath user-95=havantho user-96=what user-97=oubpgvbx user-98=tstardom user-99=sosevalu user-100=crrtipdl user-101=bakery
Sep 15 17:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=nove user-104=dhyana user-105=eatspam user-106=darkstar user-107=beauty user-108=nsceres user-109=burydropin user-110=fawcettd user-111=steve user-112=zebrapho user-113=bwppodcast user-114=sibtoncc user-115=asandcoc user-116=courseme user-117=eugincou user-118=hirefootballgame user-119=paulmca1 user-120=pugwash user-121=howardon user-122=cwsocial user-123=ninejimm user-124=reliable user-125=cathski user-126=cambria1 user-127=tigerlet user-128=barbersh user-129=hidden user-130=nomistakes user-131=smrszyqg user-132=isleofwi user-133=ctedorgu user-134=philmcph user-135=firstre5 user-136=donnychicago user-137=steakbridieme user-138=lkpier user-139=fortunaz user-140=health2045 user-141=foods user-142=leftie user-143=putterfc user-144=nscdp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 17:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:59 nativespace-cdp sudo[2334363]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:59 nativespace-cdp sudo[2334378]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fTRXD0WB0lhqBc3S.~
Sep 15 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:59 nativespace-cdp sudo[2334383]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fTRXD0WB0lhqBc3S.~'
Sep 15 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:59 nativespace-cdp sudo[2334387]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fTRXD0WB0lhqBc3S.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:09:59 nativespace-cdp sudo[2334393]: pam_unix(sudo:session): session closed for user root
Sep 15 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:10:00 nativespace-cdp sudo[2334398]: pam_unix(sudo:session): session closed for user root
Sep 15 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 17:10:06 nativespace-cdp sudo[2334554]: pam_unix(sudo:session): session closed for user root
Sep 15 17:11:33 nativespace-cdp sshd[2335079]: Connection closed by 159.100.136.21 port 44198 [preauth]
Sep 15 17:16:35 nativespace-cdp sshd[2336411]: Connection closed by 159.100.136.21 port 53340 [preauth]
Sep 15 17:21:35 nativespace-cdp sshd[2337777]: Connection closed by 159.100.136.21 port 34182 [preauth]
Sep 15 17:26:34 nativespace-cdp sshd[2338789]: Connection closed by 159.100.136.21 port 43294 [preauth]
Sep 15 17:31:33 nativespace-cdp sshd[2340213]: Connection closed by 159.100.136.21 port 52442 [preauth]
Sep 15 17:36:37 nativespace-cdp sshd[2341489]: Connection closed by 159.100.136.21 port 34084 [preauth]
Sep 15 17:41:33 nativespace-cdp sshd[2342992]: Connection closed by 159.100.136.21 port 42914 [preauth]
Sep 15 17:46:33 nativespace-cdp sshd[2344858]: Connection closed by 159.100.136.21 port 51830 [preauth]
Sep 15 17:51:33 nativespace-cdp sshd[2346181]: Connection closed by 159.100.136.21 port 60402 [preauth]
Sep 15 17:56:36 nativespace-cdp sshd[2347376]: Connection closed by 159.100.136.21 port 42064 [preauth]
Sep 15 18:01:33 nativespace-cdp sshd[2348628]: Connection closed by 159.100.136.21 port 51554 [preauth]
Sep 15 18:06:35 nativespace-cdp sshd[2350138]: Connection closed by 159.100.136.21 port 32952 [preauth]
Sep 15 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:23 nativespace-cdp sudo[2350624]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:23 nativespace-cdp sudo[2350628]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:24 nativespace-cdp sudo[2350634]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 18:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:24 nativespace-cdp sudo[2350641]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 18:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350647]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350661]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350666]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350670]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350675]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350681]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:27 nativespace-cdp sudo[2350688]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 18:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:35 nativespace-cdp sudo[2350797]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 18:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:35 nativespace-cdp sudo[2350803]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dickemery123 user-2=ptkxhsbt user-3=martsblo user-4=magichat user-5=hhdugcor user-6=lbhyisi user-7=strathar user-8=atestord user-9=sarafoundation user-10=lakesan1 user-11=brmrjxl user-12=megacards user-13=musorguk user-14=wilsonsw user-15=spectrum user-16=hodgesonweb user-17=theblack user-18=jarvisin user-19=stephani user-20=leereyn1 user-21=agproduc user-22=still user-23=vantagep user-24=athenare user-25=connect9 user-26=lbscrmod user-27=maflemin user-28=foundation user-29=markward user-30=booff user-31=ulsukarm user-32=skyfirec user-33=alexadmin user-34=nativene user-35=innovat1 user-36=askhform user-37=stuartge user-38=vivienn1 user-39=firstre2 user-40=oneoarco user-41=battlere user-42=nstriton user-43=brighto1 user-44=newstoda user-45=ggaaorgu user-46=belle user-47=bemadonn user-48=bedfords
Sep 15 18:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hubmaster user-50=putterfi user-51=fetch user-52=carsinyo user-53=gilpin user-54=milloyco user-55=elecleis user-56=connectedshoppin user-57=thqkgnbz user-58=accooper user-59=ianrayne user-60=coursemc user-61=opaiscyx user-62=ultbcrra user-63=jonhartl user-64=seftvta user-65=firstres user-66=firstred user-67=highlegh user-68=southlon user-69=clarkass user-70=firstrel user-71=costestimatorco user-72=cwsocial user-73=howardon user-74=pugwash user-75=paulmca1 user-76=cambria1 user-77=cathski user-78=reliable user-79=ninejimm user-80=eugincou user-81=courseme user-82=hirefootballgame user-83=lkpier user-84=donnychicago user-85=steakbridieme user-86=firstre5 user-87=philmcph user-88=ctedorgu user-89=nscdp user-90=putterfc user-91=leftie user-92=foods user-93=fortunaz user-94=health2045 user-95=nomistakes user-96=hidden user-97=barbersh user-98=tigerlet user-99=isleofwi user-100=smrszyqg user-101=nsceres
Sep 15 18:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=fawcettd user-103=burydropin user-104=dhyana user-105=beauty user-106=darkstar user-107=eatspam user-108=asandcoc user-109=sibtoncc user-110=steve user-111=bwppodcast user-112=zebrapho user-113=havantho user-114=sketchy user-115=cath user-116=nvihkvu user-117=tstardom user-118=oubpgvbx user-119=what user-120=design user-121=stagingerris user-122=dancinggardener user-123=ladburyp user-124=kategilpin user-125=boldover user-126=nove user-127=bakery user-128=crrtipdl user-129=sosevalu user-130=onlycont user-131=lucy user-132=attlebor user-133=romaldki user-134=hodgsonmail user-135=ranxterc user-136=outdoorc user-137=branko user-138=jennimil user-139=tomandle user-140=david user-141=careers user-142=nbhavers user-143=chrisdal user-144=mcdermos feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 18:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 18:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:36 nativespace-cdp sudo[2350811]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:36 nativespace-cdp sudo[2350819]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0TvwcOeN6Y9KVGmU.~
Sep 15 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:36 nativespace-cdp sudo[2350824]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0TvwcOeN6Y9KVGmU.~'
Sep 15 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:36 nativespace-cdp sudo[2350828]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-0TvwcOeN6Y9KVGmU.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:36 nativespace-cdp sudo[2350834]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:36 nativespace-cdp sudo[2350839]: pam_unix(sudo:session): session closed for user root
Sep 15 18:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 18:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 18:09:43 nativespace-cdp sudo[2350878]: pam_unix(sudo:session): session closed for user root
Sep 15 18:11:33 nativespace-cdp sshd[2351327]: Connection closed by 159.100.136.21 port 41892 [preauth]
Sep 15 18:16:33 nativespace-cdp sshd[2352588]: Connection closed by 159.100.136.21 port 51298 [preauth]
Sep 15 18:21:33 nativespace-cdp sshd[2354060]: Connection closed by 159.100.136.21 port 60222 [preauth]
Sep 15 18:26:36 nativespace-cdp sshd[2355109]: Connection closed by 159.100.136.21 port 41320 [preauth]
Sep 15 18:31:35 nativespace-cdp sshd[2357093]: Connection closed by 159.100.136.21 port 49486 [preauth]
Sep 15 18:36:34 nativespace-cdp sshd[2358478]: Connection closed by 159.100.136.21 port 59166 [preauth]
Sep 15 18:41:33 nativespace-cdp sshd[2359758]: Connection closed by 159.100.136.21 port 40494 [preauth]
Sep 15 18:46:33 nativespace-cdp sshd[2361217]: Connection closed by 159.100.136.21 port 50020 [preauth]
Sep 15 18:51:35 nativespace-cdp sshd[2362310]: Connection closed by 159.100.136.21 port 59138 [preauth]
Sep 15 18:56:33 nativespace-cdp sshd[2363361]: Connection closed by 159.100.136.21 port 40594 [preauth]
Sep 15 19:01:33 nativespace-cdp sshd[2364606]: Connection closed by 159.100.136.21 port 48682 [preauth]
Sep 15 19:06:33 nativespace-cdp sshd[2365627]: Connection closed by 159.100.136.21 port 56912 [preauth]
Sep 15 19:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 19:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:27 nativespace-cdp sudo[2366162]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 19:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:27 nativespace-cdp sudo[2366167]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 19:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:29 nativespace-cdp sudo[2366172]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 19:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:29 nativespace-cdp sudo[2366180]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 19:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366186]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366200]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366205]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366209]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366214]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366219]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:31 nativespace-cdp sudo[2366225]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:44 nativespace-cdp sudo[2366264]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:44 nativespace-cdp sudo[2366271]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=belle user-2=ggaaorgu user-3=newstoda user-4=bemadonn user-5=bedfords user-6=firstre2 user-7=vivienn1 user-8=battlere user-9=oneoarco user-10=brighto1 user-11=nstriton user-12=nativene user-13=innovat1 user-14=askhform user-15=stuartge user-16=skyfirec user-17=alexadmin user-18=firstred user-19=southlon user-20=highlegh user-21=firstrel user-22=clarkass user-23=costestimatorco user-24=coursemc user-25=opaiscyx user-26=seftvta user-27=jonhartl user-28=ultbcrra user-29=firstres user-30=connectedshoppin user-31=thqkgnbz user-32=accooper user-33=ianrayne user-34=putterfi user-35=hubmaster user-36=carsinyo user-37=fetch user-38=gilpin user-39=milloyco user-40=elecleis user-41=musorguk user-42=megacards user-43=wilsonsw user-44=strathar user-45=sarafoundation user-46=atestord user-47=lakesan1
Sep 15 19:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=brmrjxl user-49=magichat user-50=lbhyisi user-51=hhdugcor user-52=dickemery123 user-53=ptkxhsbt user-54=martsblo user-55=ulsukarm user-56=athenare user-57=connect9 user-58=vantagep user-59=maflemin user-60=lbscrmod user-61=markward user-62=booff user-63=foundation user-64=stephani user-65=leereyn1 user-66=still user-67=agproduc user-68=spectrum user-69=theblack user-70=hodgesonweb user-71=jarvisin user-72=bakery user-73=sosevalu user-74=crrtipdl user-75=boldover user-76=nove user-77=design user-78=ladburyp user-79=dancinggardener user-80=stagingerris user-81=kategilpin user-82=cath user-83=sketchy user-84=havantho user-85=nvihkvu user-86=tstardom user-87=oubpgvbx user-88=what user-89=nbhavers user-90=careers user-91=david user-92=chrisdal user-93=mcdermos user-94=jennimil user-95=tomandle user-96=romaldki user-97=ranxterc user-98=outdoorc user-99=hodgsonmail user-100=branko user-101=onlycont
Sep 15 19:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=attlebor user-103=lucy user-104=hidden user-105=nomistakes user-106=tigerlet user-107=barbersh user-108=smrszyqg user-109=isleofwi user-110=lkpier user-111=philmcph user-112=ctedorgu user-113=firstre5 user-114=donnychicago user-115=steakbridieme user-116=putterfc user-117=nscdp user-118=health2045 user-119=fortunaz user-120=foods user-121=leftie user-122=eugincou user-123=courseme user-124=hirefootballgame user-125=paulmca1 user-126=howardon user-127=pugwash user-128=cwsocial user-129=cathski user-130=cambria1 user-131=ninejimm user-132=reliable user-133=steve user-134=bwppodcast user-135=zebrapho user-136=asandcoc user-137=sibtoncc user-138=dhyana user-139=beauty user-140=eatspam user-141=darkstar user-142=nsceres user-143=burydropin user-144=fawcettd feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 19:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:45 nativespace-cdp sudo[2366278]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:46 nativespace-cdp sudo[2366289]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NukvWVHe02LGr8X0.~
Sep 15 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:46 nativespace-cdp sudo[2366294]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NukvWVHe02LGr8X0.~'
Sep 15 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:46 nativespace-cdp sudo[2366298]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NukvWVHe02LGr8X0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:46 nativespace-cdp sudo[2366305]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:46 nativespace-cdp sudo[2366310]: pam_unix(sudo:session): session closed for user root
Sep 15 19:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 19:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 19:09:47 nativespace-cdp sudo[2366331]: pam_unix(sudo:session): session closed for user root
Sep 15 19:11:36 nativespace-cdp sshd[2366867]: Connection closed by 159.100.136.21 port 37340 [preauth]
Sep 15 19:16:35 nativespace-cdp sshd[2368195]: Connection closed by 159.100.136.21 port 46254 [preauth]
Sep 15 19:21:33 nativespace-cdp sshd[2370126]: Connection closed by 159.100.136.21 port 55720 [preauth]
Sep 15 19:26:33 nativespace-cdp sshd[2371406]: Connection closed by 159.100.136.21 port 37156 [preauth]
Sep 15 19:31:33 nativespace-cdp sshd[2372648]: Connection closed by 159.100.136.21 port 46624 [preauth]
Sep 15 19:36:34 nativespace-cdp sshd[2374108]: Connection closed by 159.100.136.21 port 55942 [preauth]
Sep 15 19:41:33 nativespace-cdp sshd[2375203]: Connection closed by 159.100.136.21 port 36382 [preauth]
Sep 15 19:46:34 nativespace-cdp sshd[2376300]: Connection closed by 159.100.136.21 port 45990 [preauth]
Sep 15 19:48:06 nativespace-cdp sshd[2376842]: Accepted publickey for root from 185.67.178.249 port 38862 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 15 19:48:06 nativespace-cdp sshd[2376842]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 15 19:48:44 nativespace-cdp sshd[2376842]: Received disconnect from 185.67.178.249 port 38862:11: Normal Shutdown
Sep 15 19:48:44 nativespace-cdp sshd[2376842]: Disconnected from 185.67.178.249 port 38862
Sep 15 19:48:44 nativespace-cdp sshd[2376842]: pam_unix(sshd:session): session closed for user root
Sep 15 19:51:35 nativespace-cdp sshd[2377813]: Connection closed by 159.100.136.21 port 55064 [preauth]
Sep 15 19:56:36 nativespace-cdp sshd[2379214]: Connection closed by 159.100.136.21 port 36408 [preauth]
Sep 15 20:01:33 nativespace-cdp sshd[2380929]: Connection closed by 159.100.136.21 port 45804 [preauth]
Sep 15 20:06:33 nativespace-cdp sshd[2382210]: Connection closed by 159.100.136.21 port 55452 [preauth]
Sep 15 20:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 20:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:27 nativespace-cdp sudo[2383439]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 20:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:27 nativespace-cdp sudo[2383443]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 20:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:28 nativespace-cdp sudo[2383448]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:28 nativespace-cdp sudo[2383459]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:31 nativespace-cdp sudo[2383465]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:31 nativespace-cdp sudo[2383493]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:31 nativespace-cdp sudo[2383500]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:31 nativespace-cdp sudo[2383504]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:32 nativespace-cdp sudo[2383510]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:32 nativespace-cdp sudo[2383516]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:32 nativespace-cdp sudo[2383523]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:34 nativespace-cdp sudo[2383538]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 20:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:34 nativespace-cdp sudo[2383545]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sosevalu user-2=crrtipdl user-3=bakery user-4=nove user-5=boldover user-6=kategilpin user-7=ladburyp user-8=stagingerris user-9=dancinggardener user-10=design user-11=what user-12=oubpgvbx user-13=tstardom user-14=nvihkvu user-15=cath user-16=sketchy user-17=havantho user-18=mcdermos user-19=chrisdal user-20=nbhavers user-21=careers user-22=david user-23=tomandle user-24=jennimil user-25=branko user-26=ranxterc user-27=hodgsonmail user-28=outdoorc user-29=romaldki user-30=attlebor user-31=lucy user-32=onlycont user-33=isleofwi user-34=smrszyqg user-35=tigerlet user-36=barbersh user-37=hidden user-38=nomistakes user-39=health2045 user-40=fortunaz user-41=foods user-42=leftie user-43=putterfc user-44=nscdp user-45=philmcph user-46=ctedorgu user-47=firstre5 user-48=donnychicago
Sep 15 20:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=steakbridieme user-50=lkpier user-51=hirefootballgame user-52=courseme user-53=eugincou user-54=reliable user-55=ninejimm user-56=cambria1 user-57=cathski user-58=howardon user-59=paulmca1 user-60=pugwash user-61=cwsocial user-62=zebrapho user-63=bwppodcast user-64=steve user-65=asandcoc user-66=sibtoncc user-67=eatspam user-68=darkstar user-69=beauty user-70=dhyana user-71=burydropin user-72=fawcettd user-73=nsceres user-74=bedfords user-75=bemadonn user-76=belle user-77=ggaaorgu user-78=newstoda user-79=brighto1 user-80=nstriton user-81=battlere user-82=oneoarco user-83=firstre2 user-84=vivienn1 user-85=stuartge user-86=askhform user-87=innovat1 user-88=nativene user-89=skyfirec user-90=alexadmin user-91=costestimatorco user-92=clarkass user-93=firstrel user-94=southlon user-95=highlegh user-96=firstred user-97=firstres user-98=jonhartl user-99=seftvta user-100=ultbcrra user-101=coursemc
Sep 15 20:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=opaiscyx user-103=ianrayne user-104=accooper user-105=thqkgnbz user-106=connectedshoppin user-107=elecleis user-108=gilpin user-109=milloyco user-110=carsinyo user-111=fetch user-112=hubmaster user-113=putterfi user-114=wilsonsw user-115=musorguk user-116=megacards user-117=lakesan1 user-118=brmrjxl user-119=sarafoundation user-120=atestord user-121=strathar user-122=lbhyisi user-123=hhdugcor user-124=magichat user-125=martsblo user-126=ptkxhsbt user-127=dickemery123 user-128=ulsukarm user-129=markward user-130=booff user-131=foundation user-132=maflemin user-133=lbscrmod user-134=connect9 user-135=athenare user-136=vantagep user-137=still user-138=agproduc user-139=leereyn1 user-140=stephani user-141=jarvisin user-142=hodgesonweb user-143=theblack user-144=spectrum feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 15 20:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 20:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:35 nativespace-cdp sudo[2383552]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 20:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:35 nativespace-cdp sudo[2383559]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LZ89qqm4eSSAoAkC.~
Sep 15 20:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:35 nativespace-cdp sudo[2383564]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LZ89qqm4eSSAoAkC.~'
Sep 15 20:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:35 nativespace-cdp sudo[2383568]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LZ89qqm4eSSAoAkC.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 20:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:35 nativespace-cdp sudo[2383574]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 20:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:35 nativespace-cdp sudo[2383579]: pam_unix(sudo:session): session closed for user root
Sep 15 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 20:09:52 nativespace-cdp sudo[2383637]: pam_unix(sudo:session): session closed for user root
Sep 15 20:11:36 nativespace-cdp sshd[2384192]: Connection closed by 159.100.136.21 port 36532 [preauth]
Sep 15 20:16:33 nativespace-cdp sshd[2385384]: Connection closed by 159.100.136.21 port 44654 [preauth]
Sep 15 20:21:33 nativespace-cdp sshd[2386892]: Connection closed by 159.100.136.21 port 53442 [preauth]
Sep 15 20:26:36 nativespace-cdp sshd[2388183]: Connection closed by 159.100.136.21 port 34812 [preauth]
Sep 15 20:31:33 nativespace-cdp sshd[2389868]: Connection closed by 159.100.136.21 port 43678 [preauth]
Sep 15 20:36:34 nativespace-cdp sshd[2391034]: Connection closed by 159.100.136.21 port 53324 [preauth]
Sep 15 20:41:37 nativespace-cdp sshd[2392242]: Connection closed by 159.100.136.21 port 34424 [preauth]
Sep 15 20:46:33 nativespace-cdp sshd[2393493]: Connection closed by 159.100.136.21 port 44108 [preauth]
Sep 15 20:51:33 nativespace-cdp sshd[2394846]: Connection closed by 159.100.136.21 port 53114 [preauth]
Sep 15 20:56:33 nativespace-cdp sshd[2395935]: Connection closed by 159.100.136.21 port 34662 [preauth]
Sep 15 21:01:33 nativespace-cdp sshd[2397541]: Connection closed by 159.100.136.21 port 44116 [preauth]
Sep 15 21:06:33 nativespace-cdp sshd[2398707]: Connection closed by 159.100.136.21 port 52816 [preauth]
Sep 15 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:24 nativespace-cdp sudo[2399248]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:24 nativespace-cdp sudo[2399252]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:25 nativespace-cdp sudo[2399258]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 21:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:25 nativespace-cdp sudo[2399264]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 21:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399270]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 21:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399285]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 21:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399290]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 21:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399294]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 21:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399299]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 21:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399304]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 21:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:28 nativespace-cdp sudo[2399310]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 21:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:35 nativespace-cdp sudo[2399343]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 21:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:36 nativespace-cdp sudo[2399349]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nstriton user-2=brighto1 user-3=oneoarco user-4=battlere user-5=vivienn1 user-6=firstre2 user-7=bedfords user-8=bemadonn user-9=newstoda user-10=ggaaorgu user-11=belle user-12=alexadmin user-13=skyfirec user-14=stuartge user-15=askhform user-16=innovat1 user-17=nativene user-18=firstres user-19=ultbcrra user-20=jonhartl user-21=seftvta user-22=opaiscyx user-23=coursemc user-24=costestimatorco user-25=firstrel user-26=clarkass user-27=highlegh user-28=southlon user-29=firstred user-30=elecleis user-31=gilpin user-32=milloyco user-33=fetch user-34=carsinyo user-35=hubmaster user-36=putterfi user-37=ianrayne user-38=accooper user-39=thqkgnbz user-40=connectedshoppin user-41=brmrjxl user-42=lakesan1 user-43=atestord user-44=sarafoundation user-45=strathar user-46=wilsonsw user-47=megacards
Sep 15 21:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=musorguk user-49=martsblo user-50=ptkxhsbt user-51=dickemery123 user-52=hhdugcor user-53=lbhyisi user-54=magichat user-55=markward user-56=foundation user-57=booff user-58=lbscrmod user-59=maflemin user-60=vantagep user-61=athenare user-62=connect9 user-63=ulsukarm user-64=jarvisin user-65=hodgesonweb user-66=theblack user-67=spectrum user-68=agproduc user-69=still user-70=leereyn1 user-71=stephani user-72=nove user-73=boldover user-74=crrtipdl user-75=sosevalu user-76=bakery user-77=what user-78=tstardom user-79=oubpgvbx user-80=nvihkvu user-81=havantho user-82=cath user-83=sketchy user-84=kategilpin user-85=stagingerris user-86=dancinggardener user-87=ladburyp user-88=design user-89=tomandle user-90=jennimil user-91=mcdermos user-92=chrisdal user-93=david user-94=careers user-95=nbhavers user-96=lucy user-97=attlebor user-98=onlycont user-99=branko user-100=ranxterc user-101=hodgsonmail
Sep 15 21:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=outdoorc user-103=romaldki user-104=foods user-105=leftie user-106=health2045 user-107=fortunaz user-108=nscdp user-109=putterfc user-110=steakbridieme user-111=donnychicago user-112=firstre5 user-113=philmcph user-114=ctedorgu user-115=lkpier user-116=isleofwi user-117=smrszyqg user-118=tigerlet user-119=barbersh user-120=nomistakes user-121=hidden user-122=ninejimm user-123=reliable user-124=cambria1 user-125=cathski user-126=cwsocial user-127=howardon user-128=paulmca1 user-129=pugwash user-130=hirefootballgame user-131=courseme user-132=eugincou user-133=sibtoncc user-134=asandcoc user-135=zebrapho user-136=bwppodcast user-137=steve user-138=fawcettd user-139=burydropin user-140=nsceres user-141=darkstar user-142=eatspam user-143=beauty user-144=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 15 21:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 21:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:38 nativespace-cdp sudo[2399367]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:39 nativespace-cdp sudo[2399378]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JmNy3lKKFLXp9ZNn.~
Sep 15 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:39 nativespace-cdp sudo[2399383]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JmNy3lKKFLXp9ZNn.~'
Sep 15 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:39 nativespace-cdp sudo[2399387]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JmNy3lKKFLXp9ZNn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:39 nativespace-cdp sudo[2399394]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 21:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:39 nativespace-cdp sudo[2399399]: pam_unix(sudo:session): session closed for user root
Sep 15 21:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 21:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 21:09:58 nativespace-cdp sudo[2399469]: pam_unix(sudo:session): session closed for user root
Sep 15 21:11:33 nativespace-cdp sshd[2399982]: Connection closed by 159.100.136.21 port 33994 [preauth]
Sep 15 21:16:33 nativespace-cdp sshd[2401481]: Connection closed by 159.100.136.21 port 43634 [preauth]
Sep 15 21:21:34 nativespace-cdp sshd[2403337]: Connection closed by 159.100.136.21 port 52234 [preauth]
Sep 15 21:26:33 nativespace-cdp sshd[2408188]: Connection closed by 159.100.136.21 port 34054 [preauth]
Sep 15 21:31:35 nativespace-cdp sshd[2409470]: Connection closed by 159.100.136.21 port 43108 [preauth]
Sep 15 21:36:02 nativespace-cdp sshd[2410461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.248.164.42  user=root
Sep 15 21:36:02 nativespace-cdp sshd[2410461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 21:36:03 nativespace-cdp sshd[2410461]: Failed password for root from 155.248.164.42 port 48742 ssh2
Sep 15 21:36:03 nativespace-cdp sshd[2410461]: Received disconnect from 155.248.164.42 port 48742:11: Bye Bye [preauth]
Sep 15 21:36:03 nativespace-cdp sshd[2410461]: Disconnected from 155.248.164.42 port 48742 [preauth]
Sep 15 21:36:33 nativespace-cdp sshd[2411028]: Connection closed by 159.100.136.21 port 52746 [preauth]
Sep 15 21:41:23 nativespace-cdp sshd[2412163]: Connection closed by 155.248.164.42 port 41690 [preauth]
Sep 15 21:41:33 nativespace-cdp sshd[2412195]: Connection closed by 159.100.136.21 port 33802 [preauth]
Sep 15 21:42:03 nativespace-cdp sshd[2412272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.248.164.42  user=root
Sep 15 21:42:03 nativespace-cdp sshd[2412272]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 21:42:04 nativespace-cdp sshd[2412272]: Failed password for root from 155.248.164.42 port 60398 ssh2
Sep 15 21:42:04 nativespace-cdp sshd[2412272]: Received disconnect from 155.248.164.42 port 60398:11: Bye Bye [preauth]
Sep 15 21:42:04 nativespace-cdp sshd[2412272]: Disconnected from 155.248.164.42 port 60398 [preauth]
Sep 15 21:42:50 nativespace-cdp sshd[2412425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.248.164.42  user=root
Sep 15 21:42:50 nativespace-cdp sshd[2412425]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 21:42:52 nativespace-cdp sshd[2412425]: Failed password for root from 155.248.164.42 port 35352 ssh2
Sep 15 21:42:54 nativespace-cdp sshd[2412425]: Received disconnect from 155.248.164.42 port 35352:11: Bye Bye [preauth]
Sep 15 21:42:54 nativespace-cdp sshd[2412425]: Disconnected from 155.248.164.42 port 35352 [preauth]
Sep 15 21:46:35 nativespace-cdp sshd[2414458]: Connection closed by 159.100.136.21 port 42780 [preauth]
Sep 15 21:51:33 nativespace-cdp sshd[2415848]: Connection closed by 159.100.136.21 port 52390 [preauth]
Sep 15 21:56:33 nativespace-cdp sshd[2417174]: Connection closed by 159.100.136.21 port 34036 [preauth]
Sep 15 22:01:35 nativespace-cdp sshd[2419021]: Connection closed by 159.100.136.21 port 43232 [preauth]
Sep 15 22:06:33 nativespace-cdp sshd[2420002]: Connection closed by 159.100.136.21 port 52624 [preauth]
Sep 15 22:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 22:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:29 nativespace-cdp sudo[2420566]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 22:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:29 nativespace-cdp sudo[2420571]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 22:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:30 nativespace-cdp sudo[2420576]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:30 nativespace-cdp sudo[2420589]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:34 nativespace-cdp sudo[2420595]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:34 nativespace-cdp sudo[2420617]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:34 nativespace-cdp sudo[2420623]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:34 nativespace-cdp sudo[2420627]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:34 nativespace-cdp sudo[2420632]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:34 nativespace-cdp sudo[2420638]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:35 nativespace-cdp sudo[2420643]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:40 nativespace-cdp sudo[2420668]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 22:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:41 nativespace-cdp sudo[2420675]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=pugwash user-2=paulmca1 user-3=howardon user-4=cwsocial user-5=cambria1 user-6=cathski user-7=ninejimm user-8=reliable user-9=eugincou user-10=courseme user-11=hirefootballgame user-12=lkpier user-13=ctedorgu user-14=philmcph user-15=steakbridieme user-16=firstre5 user-17=donnychicago user-18=putterfc user-19=nscdp user-20=health2045 user-21=fortunaz user-22=leftie user-23=foods user-24=hidden user-25=nomistakes user-26=barbersh user-27=tigerlet user-28=isleofwi user-29=smrszyqg user-30=nsceres user-31=burydropin user-32=fawcettd user-33=dhyana user-34=beauty user-35=eatspam user-36=darkstar user-37=sibtoncc user-38=asandcoc user-39=steve user-40=bwppodcast user-41=zebrapho user-42=sketchy user-43=cath user-44=havantho user-45=nvihkvu user-46=tstardom user-47=oubpgvbx user-48=what user-49=design
Sep 15 22:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=ladburyp user-51=stagingerris user-52=dancinggardener user-53=kategilpin user-54=boldover user-55=nove user-56=bakery user-57=sosevalu user-58=crrtipdl user-59=onlycont user-60=attlebor user-61=lucy user-62=romaldki user-63=outdoorc user-64=ranxterc user-65=hodgsonmail user-66=branko user-67=jennimil user-68=tomandle user-69=careers user-70=nbhavers user-71=david user-72=chrisdal user-73=mcdermos user-74=dickemery123 user-75=ptkxhsbt user-76=martsblo user-77=magichat user-78=lbhyisi user-79=hhdugcor user-80=strathar user-81=sarafoundation user-82=atestord user-83=brmrjxl user-84=lakesan1 user-85=musorguk user-86=megacards user-87=wilsonsw user-88=spectrum user-89=theblack user-90=hodgesonweb user-91=jarvisin user-92=stephani user-93=leereyn1 user-94=still user-95=agproduc user-96=athenare user-97=connect9 user-98=vantagep user-99=maflemin user-100=lbscrmod user-101=markward user-102=booff
Sep 15 22:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=foundation user-104=ulsukarm user-105=alexadmin user-106=skyfirec user-107=nativene user-108=innovat1 user-109=askhform user-110=stuartge user-111=firstre2 user-112=vivienn1 user-113=battlere user-114=oneoarco user-115=brighto1 user-116=nstriton user-117=ggaaorgu user-118=belle user-119=newstoda user-120=bemadonn user-121=bedfords user-122=putterfi user-123=hubmaster user-124=carsinyo user-125=fetch user-126=gilpin user-127=milloyco user-128=elecleis user-129=connectedshoppin user-130=thqkgnbz user-131=accooper user-132=ianrayne user-133=opaiscyx user-134=coursemc user-135=seftvta user-136=jonhartl user-137=ultbcrra user-138=firstres user-139=firstred user-140=southlon user-141=highlegh user-142=clarkass user-143=firstrel user-144=costestimatorco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 22:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 22:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:42 nativespace-cdp sudo[2420685]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:43 nativespace-cdp sudo[2420695]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OSfsoXiSrMRj3Rnz.~
Sep 15 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:43 nativespace-cdp sudo[2420701]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OSfsoXiSrMRj3Rnz.~'
Sep 15 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:43 nativespace-cdp sudo[2420706]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OSfsoXiSrMRj3Rnz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:43 nativespace-cdp sudo[2420714]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:43 nativespace-cdp sudo[2420719]: pam_unix(sudo:session): session closed for user root
Sep 15 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 22:09:45 nativespace-cdp sudo[2420746]: pam_unix(sudo:session): session closed for user root
Sep 15 22:11:34 nativespace-cdp sshd[2421230]: Connection closed by 159.100.136.21 port 33774 [preauth]
Sep 15 22:16:33 nativespace-cdp sshd[2422323]: Connection closed by 159.100.136.21 port 43606 [preauth]
Sep 15 22:21:35 nativespace-cdp sshd[2423526]: Connection closed by 159.100.136.21 port 52442 [preauth]
Sep 15 22:26:36 nativespace-cdp sshd[2424714]: Connection closed by 159.100.136.21 port 33192 [preauth]
Sep 15 22:31:35 nativespace-cdp sshd[2426129]: Connection closed by 159.100.136.21 port 42556 [preauth]
Sep 15 22:36:37 nativespace-cdp sshd[2427713]: Connection closed by 159.100.136.21 port 51738 [preauth]
Sep 15 22:41:33 nativespace-cdp sshd[2428819]: Connection closed by 159.100.136.21 port 60724 [preauth]
Sep 15 22:46:33 nativespace-cdp sshd[2430310]: Connection closed by 159.100.136.21 port 41846 [preauth]
Sep 15 22:51:34 nativespace-cdp sshd[2431420]: Connection closed by 159.100.136.21 port 49936 [preauth]
Sep 15 22:56:33 nativespace-cdp sshd[2432479]: Connection closed by 159.100.136.21 port 58904 [preauth]
Sep 15 23:01:33 nativespace-cdp sshd[2433719]: Connection closed by 159.100.136.21 port 39954 [preauth]
Sep 15 23:06:19 nativespace-cdp sshd[2435120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.248.137  user=root
Sep 15 23:06:19 nativespace-cdp sshd[2435120]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:06:21 nativespace-cdp sshd[2435120]: Failed password for root from 192.3.248.137 port 38644 ssh2
Sep 15 23:06:21 nativespace-cdp sshd[2435123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.44.110  user=root
Sep 15 23:06:21 nativespace-cdp sshd[2435123]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:06:22 nativespace-cdp sshd[2435120]: Received disconnect from 192.3.248.137 port 38644:11: Bye Bye [preauth]
Sep 15 23:06:22 nativespace-cdp sshd[2435120]: Disconnected from 192.3.248.137 port 38644 [preauth]
Sep 15 23:06:23 nativespace-cdp sshd[2435123]: Failed password for root from 103.10.44.110 port 37454 ssh2
Sep 15 23:06:23 nativespace-cdp sshd[2435123]: Received disconnect from 103.10.44.110 port 37454:11: Bye Bye [preauth]
Sep 15 23:06:23 nativespace-cdp sshd[2435123]: Disconnected from 103.10.44.110 port 37454 [preauth]
Sep 15 23:06:33 nativespace-cdp sshd[2435165]: Connection closed by 159.100.136.21 port 48802 [preauth]
Sep 15 23:07:13 nativespace-cdp sshd[2435382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.120.93  user=root
Sep 15 23:07:13 nativespace-cdp sshd[2435382]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:07:15 nativespace-cdp sshd[2435382]: Failed password for root from 51.75.120.93 port 53084 ssh2
Sep 15 23:07:15 nativespace-cdp sshd[2435382]: Received disconnect from 51.75.120.93 port 53084:11: Bye Bye [preauth]
Sep 15 23:07:15 nativespace-cdp sshd[2435382]: Disconnected from 51.75.120.93 port 53084 [preauth]
Sep 15 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 15 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:23 nativespace-cdp sudo[2435786]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 15 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:23 nativespace-cdp sudo[2435791]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 15 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:24 nativespace-cdp sudo[2435796]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 15 23:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:24 nativespace-cdp sudo[2435803]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 15 23:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:26 nativespace-cdp sudo[2435809]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 15 23:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:26 nativespace-cdp sudo[2435821]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 15 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:27 nativespace-cdp sudo[2435827]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 15 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:27 nativespace-cdp sudo[2435833]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 15 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:27 nativespace-cdp sudo[2435838]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 15 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:27 nativespace-cdp sudo[2435843]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 15 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:27 nativespace-cdp sudo[2435849]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 15 23:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:28 nativespace-cdp sudo[2435867]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 15 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:29 nativespace-cdp sudo[2435873]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=burydropin user-2=fawcettd user-3=nsceres user-4=eatspam user-5=darkstar user-6=beauty user-7=dhyana user-8=sibtoncc user-9=asandcoc user-10=zebrapho user-11=bwppodcast user-12=steve user-13=reliable user-14=ninejimm user-15=cathski user-16=cambria1 user-17=pugwash user-18=paulmca1 user-19=howardon user-20=cwsocial user-21=hirefootballgame user-22=courseme user-23=eugincou user-24=health2045 user-25=fortunaz user-26=leftie user-27=foods user-28=putterfc user-29=nscdp user-30=philmcph user-31=ctedorgu user-32=donnychicago user-33=steakbridieme user-34=firstre5 user-35=lkpier user-36=isleofwi user-37=smrszyqg user-38=tigerlet user-39=barbersh user-40=hidden user-41=nomistakes user-42=attlebor user-43=lucy user-44=onlycont user-45=branko user-46=outdoorc user-47=hodgsonmail user-48=ranxterc
Sep 15 23:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=romaldki user-50=tomandle user-51=jennimil user-52=mcdermos user-53=chrisdal user-54=careers user-55=nbhavers user-56=david user-57=what user-58=tstardom user-59=oubpgvbx user-60=nvihkvu user-61=sketchy user-62=cath user-63=havantho user-64=kategilpin user-65=ladburyp user-66=stagingerris user-67=dancinggardener user-68=design user-69=nove user-70=boldover user-71=sosevalu user-72=crrtipdl user-73=bakery user-74=jarvisin user-75=theblack user-76=hodgesonweb user-77=spectrum user-78=still user-79=agproduc user-80=leereyn1 user-81=stephani user-82=markward user-83=booff user-84=foundation user-85=maflemin user-86=lbscrmod user-87=connect9 user-88=athenare user-89=vantagep user-90=ulsukarm user-91=martsblo user-92=ptkxhsbt user-93=dickemery123 user-94=lbhyisi user-95=hhdugcor user-96=magichat user-97=brmrjxl user-98=lakesan1 user-99=sarafoundation user-100=atestord user-101=strathar user-102=wilsonsw
Sep 15 23:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=musorguk user-104=megacards user-105=elecleis user-106=gilpin user-107=milloyco user-108=carsinyo user-109=fetch user-110=hubmaster user-111=putterfi user-112=ianrayne user-113=accooper user-114=thqkgnbz user-115=connectedshoppin user-116=firstres user-117=seftvta user-118=jonhartl user-119=ultbcrra user-120=opaiscyx user-121=coursemc user-122=costestimatorco user-123=firstrel user-124=clarkass user-125=southlon user-126=highlegh user-127=firstred user-128=alexadmin user-129=skyfirec user-130=stuartge user-131=askhform user-132=innovat1 user-133=nativene user-134=brighto1 user-135=nstriton user-136=battlere user-137=oneoarco user-138=firstre2 user-139=vivienn1 user-140=bedfords user-141=bemadonn user-142=belle user-143=ggaaorgu user-144=newstoda feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 15 23:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 15 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:30 nativespace-cdp sudo[2435882]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:30 nativespace-cdp sudo[2435896]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Oh6M3ML1Sp7FVks8.~
Sep 15 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:30 nativespace-cdp sudo[2435901]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Oh6M3ML1Sp7FVks8.~'
Sep 15 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:30 nativespace-cdp sudo[2435905]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Oh6M3ML1Sp7FVks8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 15 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:30 nativespace-cdp sudo[2435911]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 15 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:30 nativespace-cdp sudo[2435916]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 15 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:36 nativespace-cdp sudo[2435922]: pam_unix(sudo:session): session closed for user root
Sep 15 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 15 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 15 23:09:37 nativespace-cdp sudo[2435959]: pam_unix(sudo:session): session closed for user root
Sep 15 23:11:35 nativespace-cdp sshd[2436423]: Connection closed by 159.100.136.21 port 57212 [preauth]
Sep 15 23:11:37 nativespace-cdp sshd[2436429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.214.170.169  user=root
Sep 15 23:11:37 nativespace-cdp sshd[2436429]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:11:39 nativespace-cdp sshd[2436429]: Failed password for root from 162.214.170.169 port 54776 ssh2
Sep 15 23:11:42 nativespace-cdp sshd[2436429]: Received disconnect from 162.214.170.169 port 54776:11: Bye Bye [preauth]
Sep 15 23:11:42 nativespace-cdp sshd[2436429]: Disconnected from 162.214.170.169 port 54776 [preauth]
Sep 15 23:11:59 nativespace-cdp sshd[2436482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.120.93  user=root
Sep 15 23:11:59 nativespace-cdp sshd[2436482]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:12:00 nativespace-cdp sshd[2436482]: Failed password for root from 51.75.120.93 port 52916 ssh2
Sep 15 23:12:04 nativespace-cdp sshd[2436482]: Received disconnect from 51.75.120.93 port 52916:11: Bye Bye [preauth]
Sep 15 23:12:04 nativespace-cdp sshd[2436482]: Disconnected from 51.75.120.93 port 52916 [preauth]
Sep 15 23:12:35 nativespace-cdp sshd[2436671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.120.93  user=root
Sep 15 23:12:35 nativespace-cdp sshd[2436671]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:12:37 nativespace-cdp sshd[2436671]: Failed password for root from 51.75.120.93 port 53356 ssh2
Sep 15 23:12:37 nativespace-cdp sshd[2436671]: Received disconnect from 51.75.120.93 port 53356:11: Bye Bye [preauth]
Sep 15 23:12:37 nativespace-cdp sshd[2436671]: Disconnected from 51.75.120.93 port 53356 [preauth]
Sep 15 23:12:50 nativespace-cdp sshd[2436732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.248.137  user=root
Sep 15 23:12:50 nativespace-cdp sshd[2436732]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:12:52 nativespace-cdp sshd[2436732]: Failed password for root from 192.3.248.137 port 60514 ssh2
Sep 15 23:12:55 nativespace-cdp sshd[2436732]: Received disconnect from 192.3.248.137 port 60514:11: Bye Bye [preauth]
Sep 15 23:12:55 nativespace-cdp sshd[2436732]: Disconnected from 192.3.248.137 port 60514 [preauth]
Sep 15 23:13:22 nativespace-cdp sshd[2436946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.214.170.169  user=root
Sep 15 23:13:22 nativespace-cdp sshd[2436946]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:13:23 nativespace-cdp sshd[2436946]: Failed password for root from 162.214.170.169 port 46382 ssh2
Sep 15 23:13:24 nativespace-cdp sshd[2436946]: Received disconnect from 162.214.170.169 port 46382:11: Bye Bye [preauth]
Sep 15 23:13:24 nativespace-cdp sshd[2436946]: Disconnected from 162.214.170.169 port 46382 [preauth]
Sep 15 23:13:26 nativespace-cdp sshd[2436955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.44.110  user=root
Sep 15 23:13:26 nativespace-cdp sshd[2436955]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:13:29 nativespace-cdp sshd[2436955]: Failed password for root from 103.10.44.110 port 60090 ssh2
Sep 15 23:13:29 nativespace-cdp sshd[2436955]: Received disconnect from 103.10.44.110 port 60090:11: Bye Bye [preauth]
Sep 15 23:13:29 nativespace-cdp sshd[2436955]: Disconnected from 103.10.44.110 port 60090 [preauth]
Sep 15 23:13:32 nativespace-cdp sshd[2436976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.248.137  user=root
Sep 15 23:13:32 nativespace-cdp sshd[2436976]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:13:34 nativespace-cdp sshd[2436976]: Failed password for root from 192.3.248.137 port 59282 ssh2
Sep 15 23:14:03 nativespace-cdp sshd[2437088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.214.170.169  user=root
Sep 15 23:14:03 nativespace-cdp sshd[2437088]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:14:06 nativespace-cdp sshd[2437088]: Failed password for root from 162.214.170.169 port 59232 ssh2
Sep 15 23:14:06 nativespace-cdp sshd[2437088]: Received disconnect from 162.214.170.169 port 59232:11: Bye Bye [preauth]
Sep 15 23:14:06 nativespace-cdp sshd[2437088]: Disconnected from 162.214.170.169 port 59232 [preauth]
Sep 15 23:14:24 nativespace-cdp sshd[2437149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.44.110  user=root
Sep 15 23:14:24 nativespace-cdp sshd[2437149]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:14:26 nativespace-cdp sshd[2437149]: Failed password for root from 103.10.44.110 port 44828 ssh2
Sep 15 23:14:26 nativespace-cdp sshd[2437149]: Received disconnect from 103.10.44.110 port 44828:11: Bye Bye [preauth]
Sep 15 23:14:26 nativespace-cdp sshd[2437149]: Disconnected from 103.10.44.110 port 44828 [preauth]
Sep 15 23:16:35 nativespace-cdp sshd[2438148]: Connection closed by 159.100.136.21 port 38514 [preauth]
Sep 15 23:21:33 nativespace-cdp sshd[2439278]: Connection closed by 159.100.136.21 port 47632 [preauth]
Sep 15 23:26:34 nativespace-cdp sshd[2440354]: Connection closed by 159.100.136.21 port 57006 [preauth]
Sep 15 23:30:04 nativespace-cdp sshd[2441155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.22  user=root
Sep 15 23:30:04 nativespace-cdp sshd[2441155]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:30:04 nativespace-cdp sshd[2441151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50  user=root
Sep 15 23:30:04 nativespace-cdp sshd[2441151]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:30:05 nativespace-cdp sshd[2441155]: Failed password for root from 171.22.31.22 port 55398 ssh2
Sep 15 23:30:05 nativespace-cdp sshd[2441155]: Received disconnect from 171.22.31.22 port 55398:11: Bye Bye [preauth]
Sep 15 23:30:05 nativespace-cdp sshd[2441155]: Disconnected from 171.22.31.22 port 55398 [preauth]
Sep 15 23:30:06 nativespace-cdp sshd[2441151]: Failed password for root from 117.121.214.50 port 43434 ssh2
Sep 15 23:30:10 nativespace-cdp sshd[2441151]: Received disconnect from 117.121.214.50 port 43434:11: Bye Bye [preauth]
Sep 15 23:30:10 nativespace-cdp sshd[2441151]: Disconnected from 117.121.214.50 port 43434 [preauth]
Sep 15 23:30:32 nativespace-cdp sshd[2441276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.25.246  user=root
Sep 15 23:30:32 nativespace-cdp sshd[2441276]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:30:33 nativespace-cdp sshd[2441276]: Failed password for root from 157.230.25.246 port 60030 ssh2
Sep 15 23:30:33 nativespace-cdp sshd[2441276]: Received disconnect from 157.230.25.246 port 60030:11: Bye Bye [preauth]
Sep 15 23:30:33 nativespace-cdp sshd[2441276]: Disconnected from 157.230.25.246 port 60030 [preauth]
Sep 15 23:30:35 nativespace-cdp sshd[2441284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.98  user=root
Sep 15 23:30:35 nativespace-cdp sshd[2441284]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:30:37 nativespace-cdp sshd[2441284]: Failed password for root from 190.128.230.98 port 46950 ssh2
Sep 15 23:30:39 nativespace-cdp sshd[2441301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.233.36.199  user=root
Sep 15 23:30:39 nativespace-cdp sshd[2441301]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:30:41 nativespace-cdp sshd[2441301]: Failed password for root from 185.233.36.199 port 37564 ssh2
Sep 15 23:30:41 nativespace-cdp sshd[2441301]: Received disconnect from 185.233.36.199 port 37564:11: Bye Bye [preauth]
Sep 15 23:30:41 nativespace-cdp sshd[2441301]: Disconnected from 185.233.36.199 port 37564 [preauth]
Sep 15 23:31:36 nativespace-cdp sshd[2441517]: Connection closed by 159.100.136.21 port 37766 [preauth]
Sep 15 23:33:21 nativespace-cdp sshd[2442070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.248.43  user=root
Sep 15 23:33:21 nativespace-cdp sshd[2442070]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:33:22 nativespace-cdp sshd[2442070]: Failed password for root from 144.217.248.43 port 38120 ssh2
Sep 15 23:33:22 nativespace-cdp sshd[2442070]: Received disconnect from 144.217.248.43 port 38120:11: Bye Bye [preauth]
Sep 15 23:33:22 nativespace-cdp sshd[2442070]: Disconnected from 144.217.248.43 port 38120 [preauth]
Sep 15 23:35:43 nativespace-cdp sshd[2442751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.136.120  user=root
Sep 15 23:35:43 nativespace-cdp sshd[2442751]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:35:45 nativespace-cdp sshd[2442751]: Failed password for root from 161.35.136.120 port 48794 ssh2
Sep 15 23:35:45 nativespace-cdp sshd[2442751]: Received disconnect from 161.35.136.120 port 48794:11: Bye Bye [preauth]
Sep 15 23:35:45 nativespace-cdp sshd[2442751]: Disconnected from 161.35.136.120 port 48794 [preauth]
Sep 15 23:35:48 nativespace-cdp sshd[2442765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.107.98  user=root
Sep 15 23:35:48 nativespace-cdp sshd[2442765]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:35:50 nativespace-cdp sshd[2442765]: Failed password for root from 94.179.107.98 port 48235 ssh2
Sep 15 23:35:52 nativespace-cdp sshd[2442765]: Received disconnect from 94.179.107.98 port 48235:11: Bye Bye [preauth]
Sep 15 23:35:52 nativespace-cdp sshd[2442765]: Disconnected from 94.179.107.98 port 48235 [preauth]
Sep 15 23:36:33 nativespace-cdp sshd[2442945]: Connection closed by 159.100.136.21 port 46510 [preauth]
Sep 15 23:37:47 nativespace-cdp sshd[2443299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.98.49  user=root
Sep 15 23:37:47 nativespace-cdp sshd[2443299]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:37:49 nativespace-cdp sshd[2443299]: Failed password for root from 164.163.98.49 port 40342 ssh2
Sep 15 23:37:53 nativespace-cdp sshd[2443299]: Received disconnect from 164.163.98.49 port 40342:11: Bye Bye [preauth]
Sep 15 23:37:53 nativespace-cdp sshd[2443299]: Disconnected from 164.163.98.49 port 40342 [preauth]
Sep 15 23:38:00 nativespace-cdp sshd[2443325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.248.43  user=root
Sep 15 23:38:00 nativespace-cdp sshd[2443325]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:02 nativespace-cdp sshd[2443325]: Failed password for root from 144.217.248.43 port 33424 ssh2
Sep 15 23:38:02 nativespace-cdp sshd[2443325]: Received disconnect from 144.217.248.43 port 33424:11: Bye Bye [preauth]
Sep 15 23:38:02 nativespace-cdp sshd[2443325]: Disconnected from 144.217.248.43 port 33424 [preauth]
Sep 15 23:38:11 nativespace-cdp sshd[2443380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.25.246  user=root
Sep 15 23:38:11 nativespace-cdp sshd[2443380]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:13 nativespace-cdp sshd[2443380]: Failed password for root from 157.230.25.246 port 48684 ssh2
Sep 15 23:38:13 nativespace-cdp sshd[2443380]: Received disconnect from 157.230.25.246 port 48684:11: Bye Bye [preauth]
Sep 15 23:38:13 nativespace-cdp sshd[2443380]: Disconnected from 157.230.25.246 port 48684 [preauth]
Sep 15 23:38:19 nativespace-cdp sshd[2443394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.107.98  user=root
Sep 15 23:38:19 nativespace-cdp sshd[2443394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:20 nativespace-cdp sshd[2443398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.233.36.199  user=root
Sep 15 23:38:20 nativespace-cdp sshd[2443398]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:21 nativespace-cdp sshd[2443400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.98  user=root
Sep 15 23:38:21 nativespace-cdp sshd[2443400]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:21 nativespace-cdp sshd[2443398]: Failed password for root from 185.233.36.199 port 36516 ssh2
Sep 15 23:38:21 nativespace-cdp sshd[2443398]: Received disconnect from 185.233.36.199 port 36516:11: Bye Bye [preauth]
Sep 15 23:38:21 nativespace-cdp sshd[2443398]: Disconnected from 185.233.36.199 port 36516 [preauth]
Sep 15 23:38:21 nativespace-cdp sshd[2443394]: Failed password for root from 94.179.107.98 port 59817 ssh2
Sep 15 23:38:21 nativespace-cdp sshd[2443394]: Received disconnect from 94.179.107.98 port 59817:11: Bye Bye [preauth]
Sep 15 23:38:21 nativespace-cdp sshd[2443394]: Disconnected from 94.179.107.98 port 59817 [preauth]
Sep 15 23:38:22 nativespace-cdp sshd[2443400]: Failed password for root from 190.128.230.98 port 58718 ssh2
Sep 15 23:38:23 nativespace-cdp sshd[2443400]: Received disconnect from 190.128.230.98 port 58718:11: Bye Bye [preauth]
Sep 15 23:38:23 nativespace-cdp sshd[2443400]: Disconnected from 190.128.230.98 port 58718 [preauth]
Sep 15 23:38:23 nativespace-cdp sshd[2443406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50  user=root
Sep 15 23:38:23 nativespace-cdp sshd[2443406]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:25 nativespace-cdp sshd[2443406]: Failed password for root from 117.121.214.50 port 37386 ssh2
Sep 15 23:38:25 nativespace-cdp sshd[2443406]: Received disconnect from 117.121.214.50 port 37386:11: Bye Bye [preauth]
Sep 15 23:38:25 nativespace-cdp sshd[2443406]: Disconnected from 117.121.214.50 port 37386 [preauth]
Sep 15 23:38:31 nativespace-cdp sshd[2443433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.248.43  user=root
Sep 15 23:38:31 nativespace-cdp sshd[2443433]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:33 nativespace-cdp sshd[2443433]: Failed password for root from 144.217.248.43 port 45770 ssh2
Sep 15 23:38:33 nativespace-cdp sshd[2443433]: Received disconnect from 144.217.248.43 port 45770:11: Bye Bye [preauth]
Sep 15 23:38:33 nativespace-cdp sshd[2443433]: Disconnected from 144.217.248.43 port 45770 [preauth]
Sep 15 23:38:36 nativespace-cdp sshd[2443473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.22  user=root
Sep 15 23:38:36 nativespace-cdp sshd[2443473]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:38 nativespace-cdp sshd[2443473]: Failed password for root from 171.22.31.22 port 36948 ssh2
Sep 15 23:38:38 nativespace-cdp sshd[2443473]: Received disconnect from 171.22.31.22 port 36948:11: Bye Bye [preauth]
Sep 15 23:38:38 nativespace-cdp sshd[2443473]: Disconnected from 171.22.31.22 port 36948 [preauth]
Sep 15 23:38:47 nativespace-cdp sshd[2443504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.136.120  user=root
Sep 15 23:38:47 nativespace-cdp sshd[2443504]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:49 nativespace-cdp sshd[2443504]: Failed password for root from 161.35.136.120 port 39602 ssh2
Sep 15 23:38:49 nativespace-cdp sshd[2443504]: Received disconnect from 161.35.136.120 port 39602:11: Bye Bye [preauth]
Sep 15 23:38:49 nativespace-cdp sshd[2443504]: Disconnected from 161.35.136.120 port 39602 [preauth]
Sep 15 23:38:54 nativespace-cdp sshd[2443516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.25.246  user=root
Sep 15 23:38:54 nativespace-cdp sshd[2443516]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:38:56 nativespace-cdp sshd[2443516]: Failed password for root from 157.230.25.246 port 40030 ssh2
Sep 15 23:38:58 nativespace-cdp sshd[2443562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.107.98  user=root
Sep 15 23:38:58 nativespace-cdp sshd[2443562]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:39:00 nativespace-cdp sshd[2443562]: Failed password for root from 94.179.107.98 port 1339 ssh2
Sep 15 23:39:04 nativespace-cdp sshd[2443618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.233.36.199  user=root
Sep 15 23:39:04 nativespace-cdp sshd[2443618]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:39:05 nativespace-cdp sshd[2443622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.98.49  user=root
Sep 15 23:39:05 nativespace-cdp sshd[2443622]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:39:06 nativespace-cdp sshd[2443618]: Failed password for root from 185.233.36.199 port 51778 ssh2
Sep 15 23:39:08 nativespace-cdp sshd[2443622]: Failed password for root from 164.163.98.49 port 47505 ssh2
Sep 15 23:39:08 nativespace-cdp sshd[2443622]: Received disconnect from 164.163.98.49 port 47505:11: Bye Bye [preauth]
Sep 15 23:39:08 nativespace-cdp sshd[2443622]: Disconnected from 164.163.98.49 port 47505 [preauth]
Sep 15 23:39:09 nativespace-cdp sshd[2443663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50  user=root
Sep 15 23:39:09 nativespace-cdp sshd[2443663]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:39:11 nativespace-cdp sshd[2443663]: Failed password for root from 117.121.214.50 port 46862 ssh2
Sep 15 23:39:11 nativespace-cdp sshd[2443663]: Received disconnect from 117.121.214.50 port 46862:11: Bye Bye [preauth]
Sep 15 23:39:11 nativespace-cdp sshd[2443663]: Disconnected from 117.121.214.50 port 46862 [preauth]
Sep 15 23:39:22 nativespace-cdp sshd[2443677]: Received disconnect from 190.128.230.98 port 34328:11: Bye Bye [preauth]
Sep 15 23:39:22 nativespace-cdp sshd[2443677]: Disconnected from 190.128.230.98 port 34328 [preauth]
Sep 15 23:39:28 nativespace-cdp sshd[2443742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.136.120  user=root
Sep 15 23:39:28 nativespace-cdp sshd[2443742]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:39:29 nativespace-cdp sshd[2443742]: Failed password for root from 161.35.136.120 port 45284 ssh2
Sep 15 23:39:31 nativespace-cdp sshd[2443742]: Received disconnect from 161.35.136.120 port 45284:11: Bye Bye [preauth]
Sep 15 23:39:31 nativespace-cdp sshd[2443742]: Disconnected from 161.35.136.120 port 45284 [preauth]
Sep 15 23:39:54 nativespace-cdp sshd[2443900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.163.98.49  user=root
Sep 15 23:39:54 nativespace-cdp sshd[2443900]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:39:57 nativespace-cdp sshd[2443900]: Failed password for root from 164.163.98.49 port 53583 ssh2
Sep 15 23:40:00 nativespace-cdp sshd[2443900]: Received disconnect from 164.163.98.49 port 53583:11: Bye Bye [preauth]
Sep 15 23:40:00 nativespace-cdp sshd[2443900]: Disconnected from 164.163.98.49 port 53583 [preauth]
Sep 15 23:40:01 nativespace-cdp sshd[2443921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.22  user=root
Sep 15 23:40:01 nativespace-cdp sshd[2443921]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:40:03 nativespace-cdp sshd[2443921]: Failed password for root from 171.22.31.22 port 60598 ssh2
Sep 15 23:40:03 nativespace-cdp sshd[2443921]: Received disconnect from 171.22.31.22 port 60598:11: Bye Bye [preauth]
Sep 15 23:40:03 nativespace-cdp sshd[2443921]: Disconnected from 171.22.31.22 port 60598 [preauth]
Sep 15 23:40:07 nativespace-cdp sshd[2444103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.98  user=root
Sep 15 23:40:07 nativespace-cdp sshd[2444103]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 15 23:40:09 nativespace-cdp sshd[2444103]: Failed password for root from 190.128.230.98 port 57166 ssh2
Sep 15 23:41:33 nativespace-cdp sshd[2444430]: Connection closed by 159.100.136.21 port 54578 [preauth]
Sep 15 23:46:33 nativespace-cdp sshd[2445608]: Connection closed by 159.100.136.21 port 35940 [preauth]
Sep 15 23:51:33 nativespace-cdp sshd[2446752]: Connection closed by 159.100.136.21 port 45520 [preauth]
Sep 15 23:56:35 nativespace-cdp sshd[2447992]: Connection closed by 159.100.136.21 port 55248 [preauth]
Sep 16 00:01:33 nativespace-cdp sshd[2449824]: Connection closed by 159.100.136.21 port 36440 [preauth]
Sep 16 00:06:33 nativespace-cdp sshd[2450811]: Connection closed by 159.100.136.21 port 44430 [preauth]
Sep 16 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:27 nativespace-cdp sudo[2451380]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:27 nativespace-cdp sudo[2451384]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:28 nativespace-cdp sudo[2451390]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:28 nativespace-cdp sudo[2451397]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:29 nativespace-cdp sudo[2451403]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:30 nativespace-cdp sudo[2451417]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:30 nativespace-cdp sudo[2451422]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:30 nativespace-cdp sudo[2451426]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:30 nativespace-cdp sudo[2451431]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:30 nativespace-cdp sudo[2451437]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:30 nativespace-cdp sudo[2451442]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:31 nativespace-cdp sudo[2451454]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:32 nativespace-cdp sudo[2451461]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sarafoundation user-2=atestord user-3=strathar user-4=lakesan1 user-5=brmrjxl user-6=musorguk user-7=megacards user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=maflemin user-16=lbscrmod user-17=connect9 user-18=athenare user-19=vantagep user-20=booff user-21=markward user-22=foundation user-23=ulsukarm user-24=theblack user-25=hodgesonweb user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=still user-31=agproduc user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=brighto1 user-37=nstriton user-38=bemadonn user-39=belle user-40=ggaaorgu user-41=newstoda user-42=bedfords user-43=skyfirec user-44=alexadmin user-45=nativene user-46=askhform user-47=stuartge user-48=innovat1
Sep 16 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=firstres user-52=jonhartl user-53=seftvta user-54=ultbcrra user-55=southlon user-56=highlegh user-57=firstred user-58=costestimatorco user-59=clarkass user-60=firstrel user-61=carsinyo user-62=fetch user-63=hubmaster user-64=putterfi user-65=elecleis user-66=gilpin user-67=milloyco user-68=thqkgnbz user-69=connectedshoppin user-70=ianrayne user-71=accooper user-72=philmcph user-73=ctedorgu user-74=donnychicago user-75=firstre5 user-76=steakbridieme user-77=lkpier user-78=fortunaz user-79=health2045 user-80=leftie user-81=foods user-82=putterfc user-83=nscdp user-84=tigerlet user-85=barbersh user-86=hidden user-87=nomistakes user-88=isleofwi user-89=smrszyqg user-90=howardon user-91=paulmca1 user-92=pugwash user-93=cwsocial user-94=reliable user-95=ninejimm user-96=cathski user-97=cambria1 user-98=courseme user-99=eugincou user-100=hirefootballgame user-101=asandcoc
Sep 16 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=sibtoncc user-103=steve user-104=zebrapho user-105=bwppodcast user-106=nsceres user-107=burydropin user-108=fawcettd user-109=dhyana user-110=eatspam user-111=darkstar user-112=beauty user-113=boldover user-114=nove user-115=sosevalu user-116=crrtipdl user-117=bakery user-118=nvihkvu user-119=cath user-120=sketchy user-121=havantho user-122=what user-123=tstardom user-124=oubpgvbx user-125=design user-126=kategilpin user-127=ladburyp user-128=dancinggardener user-129=stagingerris user-130=jennimil user-131=tomandle user-132=nbhavers user-133=careers user-134=david user-135=mcdermos user-136=chrisdal user-137=onlycont user-138=attlebor user-139=lucy user-140=romaldki user-141=branko user-142=hodgsonmail user-143=outdoorc user-144=ranxterc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:33 nativespace-cdp sudo[2451468]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:33 nativespace-cdp sudo[2451479]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GWq15cPpnFY4CrtJ.~
Sep 16 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:33 nativespace-cdp sudo[2451484]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GWq15cPpnFY4CrtJ.~'
Sep 16 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:33 nativespace-cdp sudo[2451488]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GWq15cPpnFY4CrtJ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:33 nativespace-cdp sudo[2451494]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:33 nativespace-cdp sudo[2451499]: pam_unix(sudo:session): session closed for user root
Sep 16 00:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 00:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 00:09:55 nativespace-cdp sudo[2451570]: pam_unix(sudo:session): session closed for user root
Sep 16 00:11:33 nativespace-cdp sshd[2452007]: Connection closed by 159.100.136.21 port 53688 [preauth]
Sep 16 00:16:34 nativespace-cdp sshd[2453541]: Connection closed by 159.100.136.21 port 34792 [preauth]
Sep 16 00:21:33 nativespace-cdp sshd[2454623]: Connection closed by 159.100.136.21 port 44062 [preauth]
Sep 16 00:27:36 nativespace-cdp crond[2455697]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 16 00:27:36 nativespace-cdp crond[2455696]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 16 00:27:36 nativespace-cdp sshd[2455726]: Did not receive identification string from 159.100.136.21 port 53504
Sep 16 00:28:47 nativespace-cdp crond[2455925]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 16 00:28:47 nativespace-cdp crond[2455926]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 16 00:32:50 nativespace-cdp CROND[2455513]: pam_systemd(crond:session): Failed to release session: Connection timed out
Sep 16 00:32:50 nativespace-cdp CROND[2455753]: pam_systemd(crond:session): Failed to release session: Connection timed out
Sep 16 00:32:52 nativespace-cdp sshd[2456177]: Did not receive identification string from 159.100.136.21 port 34144
Sep 16 00:36:38 nativespace-cdp sshd[2457520]: Connection closed by 159.100.136.21 port 42994 [preauth]
Sep 16 00:41:33 nativespace-cdp sshd[2458796]: Connection closed by 159.100.136.21 port 51906 [preauth]
Sep 16 00:46:33 nativespace-cdp sshd[2460267]: Connection closed by 159.100.136.21 port 32918 [preauth]
Sep 16 00:47:52 nativespace-cdp sshd[2460463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.220.18  user=root
Sep 16 00:47:52 nativespace-cdp sshd[2460463]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:47:53 nativespace-cdp sshd[2460463]: Failed password for root from 159.65.220.18 port 50772 ssh2
Sep 16 00:47:54 nativespace-cdp sshd[2460463]: Received disconnect from 159.65.220.18 port 50772:11: Bye Bye [preauth]
Sep 16 00:47:54 nativespace-cdp sshd[2460463]: Disconnected from 159.65.220.18 port 50772 [preauth]
Sep 16 00:48:13 nativespace-cdp sshd[2460612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.111.178  user=root
Sep 16 00:48:13 nativespace-cdp sshd[2460612]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:48:15 nativespace-cdp sshd[2460612]: Failed password for root from 51.89.111.178 port 37112 ssh2
Sep 16 00:48:15 nativespace-cdp sshd[2460612]: Received disconnect from 51.89.111.178 port 37112:11: Bye Bye [preauth]
Sep 16 00:48:15 nativespace-cdp sshd[2460612]: Disconnected from 51.89.111.178 port 37112 [preauth]
Sep 16 00:50:50 nativespace-cdp sshd[2461183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.65.188.37  user=root
Sep 16 00:50:50 nativespace-cdp sshd[2461183]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:50:52 nativespace-cdp sshd[2461183]: Failed password for root from 40.65.188.37 port 58044 ssh2
Sep 16 00:50:55 nativespace-cdp sshd[2461183]: Received disconnect from 40.65.188.37 port 58044:11: Bye Bye [preauth]
Sep 16 00:50:55 nativespace-cdp sshd[2461183]: Disconnected from 40.65.188.37 port 58044 [preauth]
Sep 16 00:51:20 nativespace-cdp sshd[2461266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.123.111  user=root
Sep 16 00:51:20 nativespace-cdp sshd[2461266]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:51:23 nativespace-cdp sshd[2461266]: Failed password for root from 74.208.123.111 port 46792 ssh2
Sep 16 00:51:23 nativespace-cdp sshd[2461266]: Received disconnect from 74.208.123.111 port 46792:11: Bye Bye [preauth]
Sep 16 00:51:23 nativespace-cdp sshd[2461266]: Disconnected from 74.208.123.111 port 46792 [preauth]
Sep 16 00:51:30 nativespace-cdp sshd[2461291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Sep 16 00:51:30 nativespace-cdp sshd[2461291]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:51:32 nativespace-cdp sshd[2461291]: Failed password for root from 103.55.49.10 port 51462 ssh2
Sep 16 00:51:33 nativespace-cdp sshd[2461291]: Received disconnect from 103.55.49.10 port 51462:11: Bye Bye [preauth]
Sep 16 00:51:33 nativespace-cdp sshd[2461291]: Disconnected from 103.55.49.10 port 51462 [preauth]
Sep 16 00:51:33 nativespace-cdp sshd[2461311]: Connection closed by 159.100.136.21 port 41682 [preauth]
Sep 16 00:54:19 nativespace-cdp sshd[2461828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.38.113  user=root
Sep 16 00:54:19 nativespace-cdp sshd[2461828]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:54:21 nativespace-cdp sshd[2461828]: Failed password for root from 161.132.38.113 port 48104 ssh2
Sep 16 00:54:23 nativespace-cdp sshd[2461828]: Received disconnect from 161.132.38.113 port 48104:11: Bye Bye [preauth]
Sep 16 00:54:23 nativespace-cdp sshd[2461828]: Disconnected from 161.132.38.113 port 48104 [preauth]
Sep 16 00:55:06 nativespace-cdp sshd[2462075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.220.18  user=root
Sep 16 00:55:06 nativespace-cdp sshd[2462075]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:07 nativespace-cdp sshd[2462075]: Failed password for root from 159.65.220.18 port 38132 ssh2
Sep 16 00:55:10 nativespace-cdp sshd[2462075]: Received disconnect from 159.65.220.18 port 38132:11: Bye Bye [preauth]
Sep 16 00:55:10 nativespace-cdp sshd[2462075]: Disconnected from 159.65.220.18 port 38132 [preauth]
Sep 16 00:55:11 nativespace-cdp sshd[2462084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Sep 16 00:55:11 nativespace-cdp sshd[2462084]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:13 nativespace-cdp sshd[2462084]: Failed password for root from 103.55.49.10 port 48300 ssh2
Sep 16 00:55:14 nativespace-cdp sshd[2462084]: Received disconnect from 103.55.49.10 port 48300:11: Bye Bye [preauth]
Sep 16 00:55:14 nativespace-cdp sshd[2462084]: Disconnected from 103.55.49.10 port 48300 [preauth]
Sep 16 00:55:29 nativespace-cdp sshd[2462123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.65.188.37  user=root
Sep 16 00:55:29 nativespace-cdp sshd[2462123]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:31 nativespace-cdp sshd[2462123]: Failed password for root from 40.65.188.37 port 55990 ssh2
Sep 16 00:55:31 nativespace-cdp sshd[2462123]: Received disconnect from 40.65.188.37 port 55990:11: Bye Bye [preauth]
Sep 16 00:55:31 nativespace-cdp sshd[2462123]: Disconnected from 40.65.188.37 port 55990 [preauth]
Sep 16 00:55:32 nativespace-cdp sshd[2462132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.123.111  user=root
Sep 16 00:55:32 nativespace-cdp sshd[2462132]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:34 nativespace-cdp sshd[2462132]: Failed password for root from 74.208.123.111 port 48280 ssh2
Sep 16 00:55:34 nativespace-cdp sshd[2462132]: Received disconnect from 74.208.123.111 port 48280:11: Bye Bye [preauth]
Sep 16 00:55:34 nativespace-cdp sshd[2462132]: Disconnected from 74.208.123.111 port 48280 [preauth]
Sep 16 00:55:43 nativespace-cdp sshd[2462165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.111.178  user=root
Sep 16 00:55:43 nativespace-cdp sshd[2462165]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:43 nativespace-cdp sshd[2462163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.220.18  user=root
Sep 16 00:55:43 nativespace-cdp sshd[2462163]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:45 nativespace-cdp sshd[2462165]: Failed password for root from 51.89.111.178 port 42592 ssh2
Sep 16 00:55:45 nativespace-cdp sshd[2462163]: Failed password for root from 159.65.220.18 port 34344 ssh2
Sep 16 00:55:49 nativespace-cdp sshd[2462165]: Received disconnect from 51.89.111.178 port 42592:11: Bye Bye [preauth]
Sep 16 00:55:49 nativespace-cdp sshd[2462165]: Disconnected from 51.89.111.178 port 42592 [preauth]
Sep 16 00:55:50 nativespace-cdp sshd[2462163]: Received disconnect from 159.65.220.18 port 34344:11: Bye Bye [preauth]
Sep 16 00:55:50 nativespace-cdp sshd[2462163]: Disconnected from 159.65.220.18 port 34344 [preauth]
Sep 16 00:55:51 nativespace-cdp sshd[2462185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.38.113  user=root
Sep 16 00:55:51 nativespace-cdp sshd[2462185]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:55:53 nativespace-cdp sshd[2462185]: Failed password for root from 161.132.38.113 port 36754 ssh2
Sep 16 00:55:53 nativespace-cdp sshd[2462185]: Received disconnect from 161.132.38.113 port 36754:11: Bye Bye [preauth]
Sep 16 00:55:53 nativespace-cdp sshd[2462185]: Disconnected from 161.132.38.113 port 36754 [preauth]
Sep 16 00:56:13 nativespace-cdp sshd[2462253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Sep 16 00:56:13 nativespace-cdp sshd[2462253]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:56:14 nativespace-cdp sshd[2462263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.65.188.37  user=root
Sep 16 00:56:14 nativespace-cdp sshd[2462263]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:56:15 nativespace-cdp sshd[2462272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.123.111  user=root
Sep 16 00:56:15 nativespace-cdp sshd[2462272]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:56:16 nativespace-cdp sshd[2462253]: Failed password for root from 103.55.49.10 port 60222 ssh2
Sep 16 00:56:16 nativespace-cdp sshd[2462263]: Failed password for root from 40.65.188.37 port 43900 ssh2
Sep 16 00:56:16 nativespace-cdp sshd[2462263]: Received disconnect from 40.65.188.37 port 43900:11: Bye Bye [preauth]
Sep 16 00:56:16 nativespace-cdp sshd[2462263]: Disconnected from 40.65.188.37 port 43900 [preauth]
Sep 16 00:56:16 nativespace-cdp sshd[2462253]: Received disconnect from 103.55.49.10 port 60222:11: Bye Bye [preauth]
Sep 16 00:56:16 nativespace-cdp sshd[2462253]: Disconnected from 103.55.49.10 port 60222 [preauth]
Sep 16 00:56:17 nativespace-cdp sshd[2462272]: Failed password for root from 74.208.123.111 port 43180 ssh2
Sep 16 00:56:17 nativespace-cdp sshd[2462272]: Received disconnect from 74.208.123.111 port 43180:11: Bye Bye [preauth]
Sep 16 00:56:17 nativespace-cdp sshd[2462272]: Disconnected from 74.208.123.111 port 43180 [preauth]
Sep 16 00:56:27 nativespace-cdp sshd[2462367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.111.178  user=root
Sep 16 00:56:27 nativespace-cdp sshd[2462367]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:56:29 nativespace-cdp sshd[2462367]: Failed password for root from 51.89.111.178 port 46960 ssh2
Sep 16 00:56:33 nativespace-cdp sshd[2462427]: Connection closed by 159.100.136.21 port 50864 [preauth]
Sep 16 00:56:34 nativespace-cdp sshd[2462423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.38.113  user=root
Sep 16 00:56:34 nativespace-cdp sshd[2462423]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 00:56:36 nativespace-cdp sshd[2462423]: Failed password for root from 161.132.38.113 port 49898 ssh2
Sep 16 00:56:36 nativespace-cdp sshd[2462423]: Received disconnect from 161.132.38.113 port 49898:11: Bye Bye [preauth]
Sep 16 00:56:36 nativespace-cdp sshd[2462423]: Disconnected from 161.132.38.113 port 49898 [preauth]
Sep 16 01:01:33 nativespace-cdp sshd[2464080]: Connection closed by 159.100.136.21 port 59682 [preauth]
Sep 16 01:06:34 nativespace-cdp sshd[2465178]: Connection closed by 159.100.136.21 port 40780 [preauth]
Sep 16 01:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 01:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:01 nativespace-cdp sudo[2465825]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 01:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:01 nativespace-cdp sudo[2465828]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 01:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:03 nativespace-cdp sudo[2465832]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 01:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:03 nativespace-cdp sudo[2465955]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 01:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:08 nativespace-cdp sudo[2465958]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 01:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:08 nativespace-cdp sudo[2465981]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:09 nativespace-cdp sudo[2465985]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:09 nativespace-cdp sudo[2465988]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:09 nativespace-cdp sudo[2465991]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:09 nativespace-cdp sudo[2465994]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:09 nativespace-cdp sudo[2465997]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 01:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:12 nativespace-cdp sudo[2466014]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 01:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:13 nativespace-cdp sudo[2466020]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stephani user-2=leereyn1 user-3=agproduc user-4=still user-5=spectrum user-6=hodgesonweb user-7=theblack user-8=jarvisin user-9=ulsukarm user-10=vantagep user-11=athenare user-12=connect9 user-13=lbscrmod user-14=maflemin user-15=foundation user-16=markward user-17=booff user-18=magichat user-19=hhdugcor user-20=lbhyisi user-21=dickemery123 user-22=ptkxhsbt user-23=martsblo user-24=megacards user-25=musorguk user-26=wilsonsw user-27=strathar user-28=atestord user-29=sarafoundation user-30=brmrjxl user-31=lakesan1 user-32=connectedshoppin user-33=thqkgnbz user-34=accooper user-35=ianrayne user-36=hubmaster user-37=putterfi user-38=fetch user-39=carsinyo user-40=milloyco user-41=gilpin user-42=elecleis user-43=firstred user-44=highlegh user-45=southlon user-46=firstrel user-47=clarkass
Sep 16 01:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=costestimatorco user-49=coursemc user-50=opaiscyx user-51=ultbcrra user-52=seftvta user-53=jonhartl user-54=firstres user-55=nativene user-56=innovat1 user-57=stuartge user-58=askhform user-59=skyfirec user-60=alexadmin user-61=newstoda user-62=belle user-63=ggaaorgu user-64=bemadonn user-65=bedfords user-66=vivienn1 user-67=firstre2 user-68=oneoarco user-69=battlere user-70=nstriton user-71=brighto1 user-72=dhyana user-73=beauty user-74=darkstar user-75=eatspam user-76=nsceres user-77=fawcettd user-78=burydropin user-79=steve user-80=bwppodcast user-81=zebrapho user-82=asandcoc user-83=sibtoncc user-84=eugincou user-85=courseme user-86=hirefootballgame user-87=cwsocial user-88=pugwash user-89=paulmca1 user-90=howardon user-91=cambria1 user-92=cathski user-93=reliable user-94=ninejimm user-95=nomistakes user-96=hidden user-97=tigerlet user-98=barbersh user-99=isleofwi user-100=smrszyqg user-101=lkpier
Sep 16 01:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=steakbridieme user-103=firstre5 user-104=donnychicago user-105=ctedorgu user-106=philmcph user-107=nscdp user-108=putterfc user-109=leftie user-110=foods user-111=fortunaz user-112=health2045 user-113=romaldki user-114=hodgsonmail user-115=ranxterc user-116=outdoorc user-117=branko user-118=onlycont user-119=lucy user-120=attlebor user-121=david user-122=careers user-123=nbhavers user-124=chrisdal user-125=mcdermos user-126=jennimil user-127=tomandle user-128=design user-129=dancinggardener user-130=stagingerris user-131=ladburyp user-132=kategilpin user-133=havantho user-134=sketchy user-135=cath user-136=nvihkvu user-137=tstardom user-138=oubpgvbx user-139=what user-140=bakery user-141=crrtipdl user-142=sosevalu user-143=boldover user-144=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 01:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 01:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:14 nativespace-cdp sudo[2466028]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 01:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:15 nativespace-cdp sudo[2466034]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-1mUGu0nlAeMcDYth.~
Sep 16 01:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:15 nativespace-cdp sudo[2466037]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-1mUGu0nlAeMcDYth.~'
Sep 16 01:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:15 nativespace-cdp sudo[2466040]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-1mUGu0nlAeMcDYth.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 01:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:15 nativespace-cdp sudo[2466044]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 01:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:15 nativespace-cdp sudo[2466047]: pam_unix(sudo:session): session closed for user root
Sep 16 01:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 01:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 01:10:22 nativespace-cdp sudo[2466087]: pam_unix(sudo:session): session closed for user root
Sep 16 01:11:33 nativespace-cdp sshd[2466344]: Connection closed by 159.100.136.21 port 49432 [preauth]
Sep 16 01:16:35 nativespace-cdp sshd[2467434]: Connection closed by 159.100.136.21 port 57966 [preauth]
Sep 16 01:21:33 nativespace-cdp sshd[2468515]: Connection closed by 159.100.136.21 port 38150 [preauth]
Sep 16 01:26:33 nativespace-cdp sshd[2469508]: Connection closed by 159.100.136.21 port 47482 [preauth]
Sep 16 01:31:33 nativespace-cdp sshd[2471262]: Connection closed by 159.100.136.21 port 56824 [preauth]
Sep 16 01:36:33 nativespace-cdp sshd[2472222]: Connection closed by 159.100.136.21 port 38056 [preauth]
Sep 16 01:41:33 nativespace-cdp sshd[2473365]: Connection closed by 159.100.136.21 port 46966 [preauth]
Sep 16 01:46:33 nativespace-cdp sshd[2474687]: Connection closed by 159.100.136.21 port 56314 [preauth]
Sep 16 01:46:55 nativespace-cdp sshd[2474734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.148.195.44  user=root
Sep 16 01:46:55 nativespace-cdp sshd[2474734]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:46:57 nativespace-cdp sshd[2474734]: Failed password for root from 103.148.195.44 port 42544 ssh2
Sep 16 01:46:57 nativespace-cdp sshd[2474734]: Received disconnect from 103.148.195.44 port 42544:11: Bye Bye [preauth]
Sep 16 01:46:57 nativespace-cdp sshd[2474734]: Disconnected from 103.148.195.44 port 42544 [preauth]
Sep 16 01:47:42 nativespace-cdp sshd[2474892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.217.180  user=root
Sep 16 01:47:42 nativespace-cdp sshd[2474892]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:47:44 nativespace-cdp sshd[2474892]: Failed password for root from 14.225.217.180 port 47816 ssh2
Sep 16 01:47:46 nativespace-cdp sshd[2474892]: Received disconnect from 14.225.217.180 port 47816:11: Bye Bye [preauth]
Sep 16 01:47:46 nativespace-cdp sshd[2474892]: Disconnected from 14.225.217.180 port 47816 [preauth]
Sep 16 01:47:51 nativespace-cdp sshd[2474910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.127.0.62  user=root
Sep 16 01:47:51 nativespace-cdp sshd[2474910]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:47:51 nativespace-cdp sshd[2474912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.43.95.157  user=root
Sep 16 01:47:51 nativespace-cdp sshd[2474912]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:47:53 nativespace-cdp sshd[2474910]: Failed password for root from 103.127.0.62 port 47232 ssh2
Sep 16 01:47:53 nativespace-cdp sshd[2474912]: Failed password for root from 118.43.95.157 port 40396 ssh2
Sep 16 01:47:57 nativespace-cdp sshd[2474910]: Received disconnect from 103.127.0.62 port 47232:11: Bye Bye [preauth]
Sep 16 01:47:57 nativespace-cdp sshd[2474910]: Disconnected from 103.127.0.62 port 47232 [preauth]
Sep 16 01:48:03 nativespace-cdp sshd[2474912]: Received disconnect from 118.43.95.157 port 40396:11: Bye Bye [preauth]
Sep 16 01:48:03 nativespace-cdp sshd[2474912]: Disconnected from 118.43.95.157 port 40396 [preauth]
Sep 16 01:51:20 nativespace-cdp sshd[2476118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.170.213.245  user=root
Sep 16 01:51:20 nativespace-cdp sshd[2476118]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:51:22 nativespace-cdp sshd[2476118]: Failed password for root from 66.170.213.245 port 51468 ssh2
Sep 16 01:51:22 nativespace-cdp sshd[2476118]: Received disconnect from 66.170.213.245 port 51468:11: Bye Bye [preauth]
Sep 16 01:51:22 nativespace-cdp sshd[2476118]: Disconnected from 66.170.213.245 port 51468 [preauth]
Sep 16 01:51:33 nativespace-cdp sshd[2476171]: Connection closed by 159.100.136.21 port 36372 [preauth]
Sep 16 01:52:25 nativespace-cdp sshd[2476353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.81.204  user=root
Sep 16 01:52:25 nativespace-cdp sshd[2476353]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:52:28 nativespace-cdp sshd[2476353]: Failed password for root from 103.212.81.204 port 50556 ssh2
Sep 16 01:52:31 nativespace-cdp sshd[2476353]: Received disconnect from 103.212.81.204 port 50556:11: Bye Bye [preauth]
Sep 16 01:52:31 nativespace-cdp sshd[2476353]: Disconnected from 103.212.81.204 port 50556 [preauth]
Sep 16 01:55:02 nativespace-cdp sshd[2476909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.170.213.245  user=root
Sep 16 01:55:02 nativespace-cdp sshd[2476909]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:55:05 nativespace-cdp sshd[2476909]: Failed password for root from 66.170.213.245 port 49980 ssh2
Sep 16 01:55:05 nativespace-cdp sshd[2476909]: Received disconnect from 66.170.213.245 port 49980:11: Bye Bye [preauth]
Sep 16 01:55:05 nativespace-cdp sshd[2476909]: Disconnected from 66.170.213.245 port 49980 [preauth]
Sep 16 01:55:10 nativespace-cdp sshd[2476950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.217.180  user=root
Sep 16 01:55:10 nativespace-cdp sshd[2476950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:55:11 nativespace-cdp sshd[2476954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.127.0.62  user=root
Sep 16 01:55:11 nativespace-cdp sshd[2476954]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:55:12 nativespace-cdp sshd[2476950]: Failed password for root from 14.225.217.180 port 41602 ssh2
Sep 16 01:55:12 nativespace-cdp sshd[2476950]: Received disconnect from 14.225.217.180 port 41602:11: Bye Bye [preauth]
Sep 16 01:55:12 nativespace-cdp sshd[2476950]: Disconnected from 14.225.217.180 port 41602 [preauth]
Sep 16 01:55:13 nativespace-cdp sshd[2476954]: Failed password for root from 103.127.0.62 port 45980 ssh2
Sep 16 01:55:13 nativespace-cdp sshd[2476954]: Received disconnect from 103.127.0.62 port 45980:11: Bye Bye [preauth]
Sep 16 01:55:13 nativespace-cdp sshd[2476954]: Disconnected from 103.127.0.62 port 45980 [preauth]
Sep 16 01:55:22 nativespace-cdp sshd[2476977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.43.95.157  user=root
Sep 16 01:55:22 nativespace-cdp sshd[2476977]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:55:23 nativespace-cdp sshd[2476977]: Failed password for root from 118.43.95.157 port 46498 ssh2
Sep 16 01:55:23 nativespace-cdp sshd[2476977]: Received disconnect from 118.43.95.157 port 46498:11: Bye Bye [preauth]
Sep 16 01:55:23 nativespace-cdp sshd[2476977]: Disconnected from 118.43.95.157 port 46498 [preauth]
Sep 16 01:55:55 nativespace-cdp sshd[2477094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.170.213.245  user=root
Sep 16 01:55:55 nativespace-cdp sshd[2477094]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:55:57 nativespace-cdp sshd[2477094]: Failed password for root from 66.170.213.245 port 46142 ssh2
Sep 16 01:56:02 nativespace-cdp sshd[2477094]: Received disconnect from 66.170.213.245 port 46142:11: Bye Bye [preauth]
Sep 16 01:56:02 nativespace-cdp sshd[2477094]: Disconnected from 66.170.213.245 port 46142 [preauth]
Sep 16 01:56:11 nativespace-cdp sshd[2477170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.43.95.157  user=root
Sep 16 01:56:11 nativespace-cdp sshd[2477170]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:56:13 nativespace-cdp sshd[2477178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.217.180  user=root
Sep 16 01:56:13 nativespace-cdp sshd[2477178]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:56:13 nativespace-cdp sshd[2477170]: Failed password for root from 118.43.95.157 port 58726 ssh2
Sep 16 01:56:13 nativespace-cdp sshd[2477180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.127.0.62  user=root
Sep 16 01:56:13 nativespace-cdp sshd[2477180]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:56:13 nativespace-cdp sshd[2477170]: Received disconnect from 118.43.95.157 port 58726:11: Bye Bye [preauth]
Sep 16 01:56:13 nativespace-cdp sshd[2477170]: Disconnected from 118.43.95.157 port 58726 [preauth]
Sep 16 01:56:15 nativespace-cdp sshd[2477178]: Failed password for root from 14.225.217.180 port 56498 ssh2
Sep 16 01:56:15 nativespace-cdp sshd[2477180]: Failed password for root from 103.127.0.62 port 34724 ssh2
Sep 16 01:56:18 nativespace-cdp sshd[2477180]: Received disconnect from 103.127.0.62 port 34724:11: Bye Bye [preauth]
Sep 16 01:56:18 nativespace-cdp sshd[2477180]: Disconnected from 103.127.0.62 port 34724 [preauth]
Sep 16 01:56:24 nativespace-cdp sshd[2477178]: Received disconnect from 14.225.217.180 port 56498:11: Bye Bye [preauth]
Sep 16 01:56:24 nativespace-cdp sshd[2477178]: Disconnected from 14.225.217.180 port 56498 [preauth]
Sep 16 01:56:25 nativespace-cdp sshd[2477268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.148.195.44  user=root
Sep 16 01:56:25 nativespace-cdp sshd[2477268]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:56:27 nativespace-cdp sshd[2477268]: Failed password for root from 103.148.195.44 port 44622 ssh2
Sep 16 01:56:31 nativespace-cdp sshd[2477268]: Received disconnect from 103.148.195.44 port 44622:11: Bye Bye [preauth]
Sep 16 01:56:31 nativespace-cdp sshd[2477268]: Disconnected from 103.148.195.44 port 44622 [preauth]
Sep 16 01:56:33 nativespace-cdp sshd[2477295]: Connection closed by 159.100.136.21 port 45518 [preauth]
Sep 16 01:56:33 nativespace-cdp sshd[2476986]: Connection reset by 103.148.195.44 port 42678 [preauth]
Sep 16 01:57:23 nativespace-cdp sshd[2477427]: Connection reset by 103.148.195.44 port 50232 [preauth]
Sep 16 01:57:32 nativespace-cdp sshd[2477454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.81.204  user=root
Sep 16 01:57:32 nativespace-cdp sshd[2477454]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:57:35 nativespace-cdp sshd[2477454]: Failed password for root from 103.212.81.204 port 60102 ssh2
Sep 16 01:57:35 nativespace-cdp sshd[2477454]: Received disconnect from 103.212.81.204 port 60102:11: Bye Bye [preauth]
Sep 16 01:57:35 nativespace-cdp sshd[2477454]: Disconnected from 103.212.81.204 port 60102 [preauth]
Sep 16 01:58:00 nativespace-cdp sshd[2477530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.148.195.44  user=root
Sep 16 01:58:00 nativespace-cdp sshd[2477530]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:58:02 nativespace-cdp sshd[2477530]: Failed password for root from 103.148.195.44 port 54266 ssh2
Sep 16 01:58:32 nativespace-cdp sshd[2477725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.212.81.204  user=root
Sep 16 01:58:32 nativespace-cdp sshd[2477725]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 01:58:34 nativespace-cdp sshd[2477725]: Failed password for root from 103.212.81.204 port 44844 ssh2
Sep 16 02:01:33 nativespace-cdp sshd[2478650]: Connection closed by 159.100.136.21 port 54148 [preauth]
Sep 16 02:06:33 nativespace-cdp sshd[2479951]: Connection closed by 159.100.136.21 port 32916 [preauth]
Sep 16 02:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 02:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:55 nativespace-cdp sudo[2480647]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 02:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:55 nativespace-cdp sudo[2480650]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 02:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:56 nativespace-cdp sudo[2480653]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:56 nativespace-cdp sudo[2480658]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480661]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 02:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480672]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 02:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480675]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 02:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480678]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 02:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480681]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 02:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480684]: pam_unix(sudo:session): session closed for user root
Sep 16 02:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 02:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:09:58 nativespace-cdp sudo[2480687]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 02:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:00 nativespace-cdp sudo[2480696]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 02:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:00 nativespace-cdp sudo[2480701]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=markward user-2=booff user-3=foundation user-4=athenare user-5=connect9 user-6=vantagep user-7=maflemin user-8=lbscrmod user-9=ulsukarm user-10=jarvisin user-11=spectrum user-12=hodgesonweb user-13=theblack user-14=still user-15=agproduc user-16=stephani user-17=leereyn1 user-18=lakesan1 user-19=brmrjxl user-20=strathar user-21=sarafoundation user-22=atestord user-23=wilsonsw user-24=musorguk user-25=megacards user-26=martsblo user-27=dickemery123 user-28=ptkxhsbt user-29=lbhyisi user-30=hhdugcor user-31=magichat user-32=jonhartl user-33=seftvta user-34=ultbcrra user-35=firstres user-36=opaiscyx user-37=coursemc user-38=clarkass user-39=firstrel user-40=costestimatorco user-41=firstred user-42=southlon user-43=highlegh user-44=gilpin user-45=milloyco user-46=elecleis user-47=putterfi
Sep 16 02:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=hubmaster user-49=carsinyo user-50=fetch user-51=accooper user-52=ianrayne user-53=connectedshoppin user-54=thqkgnbz user-55=brighto1 user-56=nstriton user-57=firstre2 user-58=vivienn1 user-59=battlere user-60=oneoarco user-61=bedfords user-62=ggaaorgu user-63=belle user-64=newstoda user-65=bemadonn user-66=alexadmin user-67=skyfirec user-68=innovat1 user-69=stuartge user-70=askhform user-71=nativene user-72=asandcoc user-73=sibtoncc user-74=bwppodcast user-75=zebrapho user-76=steve user-77=burydropin user-78=fawcettd user-79=nsceres user-80=beauty user-81=eatspam user-82=darkstar user-83=dhyana user-84=putterfc user-85=nscdp user-86=fortunaz user-87=health2045 user-88=foods user-89=leftie user-90=lkpier user-91=ctedorgu user-92=philmcph user-93=firstre5 user-94=steakbridieme user-95=donnychicago user-96=smrszyqg user-97=isleofwi user-98=hidden user-99=nomistakes user-100=tigerlet user-101=barbersh
Sep 16 02:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cambria1 user-103=cathski user-104=reliable user-105=ninejimm user-106=paulmca1 user-107=pugwash user-108=howardon user-109=cwsocial user-110=hirefootballgame user-111=eugincou user-112=courseme user-113=tomandle user-114=jennimil user-115=chrisdal user-116=mcdermos user-117=nbhavers user-118=careers user-119=david user-120=attlebor user-121=lucy user-122=onlycont user-123=outdoorc user-124=hodgsonmail user-125=ranxterc user-126=branko user-127=romaldki user-128=nove user-129=boldover user-130=bakery user-131=sosevalu user-132=crrtipdl user-133=oubpgvbx user-134=tstardom user-135=what user-136=cath user-137=sketchy user-138=havantho user-139=nvihkvu user-140=ladburyp user-141=stagingerris user-142=dancinggardener user-143=kategilpin user-144=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 02:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 02:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:01 nativespace-cdp sudo[2480706]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 02:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:01 nativespace-cdp sudo[2480822]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GT2TUHlyFYjEN2l8.~
Sep 16 02:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:02 nativespace-cdp sudo[2480830]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GT2TUHlyFYjEN2l8.~'
Sep 16 02:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:02 nativespace-cdp sudo[2480833]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GT2TUHlyFYjEN2l8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 02:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:02 nativespace-cdp sudo[2480838]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 02:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:02 nativespace-cdp sudo[2480841]: pam_unix(sudo:session): session closed for user root
Sep 16 02:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 02:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 02:10:19 nativespace-cdp sudo[2480915]: pam_unix(sudo:session): session closed for user root
Sep 16 02:11:35 nativespace-cdp sshd[2481158]: Connection closed by 159.100.136.21 port 41724 [preauth]
Sep 16 02:16:34 nativespace-cdp sshd[2482622]: Connection closed by 159.100.136.21 port 50348 [preauth]
Sep 16 02:21:37 nativespace-cdp sshd[2483754]: Connection closed by 159.100.136.21 port 59486 [preauth]
Sep 16 02:26:33 nativespace-cdp sshd[2484688]: Connection closed by 159.100.136.21 port 40786 [preauth]
Sep 16 02:31:36 nativespace-cdp sshd[2486110]: Connection closed by 159.100.136.21 port 49506 [preauth]
Sep 16 02:36:36 nativespace-cdp sshd[2487165]: Connection closed by 159.100.136.21 port 58790 [preauth]
Sep 16 02:41:34 nativespace-cdp sshd[2488255]: Connection closed by 159.100.136.21 port 39340 [preauth]
Sep 16 02:46:33 nativespace-cdp sshd[2489496]: Connection closed by 159.100.136.21 port 48796 [preauth]
Sep 16 02:51:33 nativespace-cdp sshd[2490693]: Connection closed by 159.100.136.21 port 57522 [preauth]
Sep 16 02:56:33 nativespace-cdp sshd[2491967]: Connection closed by 159.100.136.21 port 38634 [preauth]
Sep 16 03:01:35 nativespace-cdp sshd[2493616]: Connection closed by 159.100.136.21 port 48258 [preauth]
Sep 16 03:06:35 nativespace-cdp sshd[2494763]: Connection closed by 159.100.136.21 port 57760 [preauth]
Sep 16 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:00 nativespace-cdp sudo[2495404]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:00 nativespace-cdp sudo[2495408]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:03 nativespace-cdp sudo[2495411]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 03:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:03 nativespace-cdp sudo[2495513]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 03:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:05 nativespace-cdp sudo[2495520]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 03:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:05 nativespace-cdp sudo[2495552]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 03:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:05 nativespace-cdp sudo[2495555]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 03:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:05 nativespace-cdp sudo[2495558]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 03:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:06 nativespace-cdp sudo[2495561]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 03:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:06 nativespace-cdp sudo[2495565]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 03:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:06 nativespace-cdp sudo[2495569]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 03:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:13 nativespace-cdp sudo[2495601]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 03:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:14 nativespace-cdp sudo[2495605]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=seftvta user-2=jonhartl user-3=ultbcrra user-4=firstres user-5=opaiscyx user-6=coursemc user-7=clarkass user-8=firstrel user-9=costestimatorco user-10=firstred user-11=southlon user-12=highlegh user-13=gilpin user-14=milloyco user-15=elecleis user-16=hubmaster user-17=putterfi user-18=carsinyo user-19=fetch user-20=accooper user-21=ianrayne user-22=connectedshoppin user-23=thqkgnbz user-24=brighto1 user-25=nstriton user-26=firstre2 user-27=vivienn1 user-28=battlere user-29=oneoarco user-30=bedfords user-31=belle user-32=ggaaorgu user-33=newstoda user-34=bemadonn user-35=skyfirec user-36=alexadmin user-37=innovat1 user-38=askhform user-39=stuartge user-40=nativene user-41=booff user-42=markward user-43=foundation user-44=athenare user-45=connect9 user-46=vantagep user-47=maflemin user-48=lbscrmod
Sep 16 03:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ulsukarm user-50=jarvisin user-51=spectrum user-52=hodgesonweb user-53=theblack user-54=still user-55=agproduc user-56=stephani user-57=leereyn1 user-58=lakesan1 user-59=brmrjxl user-60=strathar user-61=sarafoundation user-62=atestord user-63=wilsonsw user-64=musorguk user-65=megacards user-66=martsblo user-67=dickemery123 user-68=ptkxhsbt user-69=lbhyisi user-70=hhdugcor user-71=magichat user-72=tomandle user-73=jennimil user-74=chrisdal user-75=mcdermos user-76=nbhavers user-77=careers user-78=david user-79=attlebor user-80=lucy user-81=onlycont user-82=outdoorc user-83=hodgsonmail user-84=ranxterc user-85=branko user-86=romaldki user-87=nove user-88=boldover user-89=bakery user-90=sosevalu user-91=crrtipdl user-92=oubpgvbx user-93=tstardom user-94=what user-95=sketchy user-96=cath user-97=havantho user-98=nvihkvu user-99=ladburyp user-100=dancinggardener user-101=stagingerris user-102=kategilpin
Sep 16 03:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=design user-104=asandcoc user-105=sibtoncc user-106=bwppodcast user-107=zebrapho user-108=steve user-109=burydropin user-110=fawcettd user-111=nsceres user-112=beauty user-113=eatspam user-114=darkstar user-115=dhyana user-116=putterfc user-117=nscdp user-118=fortunaz user-119=health2045 user-120=foods user-121=leftie user-122=lkpier user-123=ctedorgu user-124=philmcph user-125=firstre5 user-126=donnychicago user-127=steakbridieme user-128=isleofwi user-129=smrszyqg user-130=hidden user-131=nomistakes user-132=barbersh user-133=tigerlet user-134=cathski user-135=cambria1 user-136=ninejimm user-137=reliable user-138=paulmca1 user-139=pugwash user-140=howardon user-141=cwsocial user-142=hirefootballgame user-143=eugincou user-144=courseme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 03:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 03:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:15 nativespace-cdp sudo[2495610]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 03:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:15 nativespace-cdp sudo[2495617]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KXhzAWfSGaF9PhzS.~
Sep 16 03:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:16 nativespace-cdp sudo[2495620]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KXhzAWfSGaF9PhzS.~'
Sep 16 03:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:16 nativespace-cdp sudo[2495623]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KXhzAWfSGaF9PhzS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 03:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:16 nativespace-cdp sudo[2495627]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 03:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:16 nativespace-cdp sudo[2495630]: pam_unix(sudo:session): session closed for user root
Sep 16 03:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 03:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 03:10:23 nativespace-cdp sudo[2495677]: pam_unix(sudo:session): session closed for user root
Sep 16 03:11:33 nativespace-cdp sshd[2495913]: Connection closed by 159.100.136.21 port 38262 [preauth]
Sep 16 03:20:41 nativespace-cdp sshd[2498298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.220.39  user=root
Sep 16 03:20:41 nativespace-cdp sshd[2498298]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:20:43 nativespace-cdp sshd[2498298]: Failed password for root from 152.32.220.39 port 20548 ssh2
Sep 16 03:20:48 nativespace-cdp sshd[2498298]: Received disconnect from 152.32.220.39 port 20548:11: Bye Bye [preauth]
Sep 16 03:20:48 nativespace-cdp sshd[2498298]: Disconnected from 152.32.220.39 port 20548 [preauth]
Sep 16 03:20:49 nativespace-cdp sshd[2498382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.190.221  user=root
Sep 16 03:20:49 nativespace-cdp sshd[2498382]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:20:51 nativespace-cdp sshd[2498382]: Failed password for root from 152.32.190.221 port 26472 ssh2
Sep 16 03:20:52 nativespace-cdp sshd[2498382]: Received disconnect from 152.32.190.221 port 26472:11: Bye Bye [preauth]
Sep 16 03:20:52 nativespace-cdp sshd[2498382]: Disconnected from 152.32.190.221 port 26472 [preauth]
Sep 16 03:21:33 nativespace-cdp sshd[2498536]: Connection closed by 159.100.136.21 port 56218 [preauth]
Sep 16 03:21:45 nativespace-cdp sshd[2498553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.32.56  user=root
Sep 16 03:21:45 nativespace-cdp sshd[2498553]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:21:47 nativespace-cdp sshd[2498553]: Failed password for root from 206.189.32.56 port 35454 ssh2
Sep 16 03:21:50 nativespace-cdp sshd[2498553]: Received disconnect from 206.189.32.56 port 35454:11: Bye Bye [preauth]
Sep 16 03:21:50 nativespace-cdp sshd[2498553]: Disconnected from 206.189.32.56 port 35454 [preauth]
Sep 16 03:22:27 nativespace-cdp sshd[2498695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.217.179  user=root
Sep 16 03:22:27 nativespace-cdp sshd[2498695]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:22:29 nativespace-cdp sshd[2498695]: Failed password for root from 188.166.217.179 port 45824 ssh2
Sep 16 03:22:30 nativespace-cdp sshd[2498695]: Received disconnect from 188.166.217.179 port 45824:11: Bye Bye [preauth]
Sep 16 03:22:30 nativespace-cdp sshd[2498695]: Disconnected from 188.166.217.179 port 45824 [preauth]
Sep 16 03:23:40 nativespace-cdp sshd[2498863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.127.102  user=root
Sep 16 03:23:40 nativespace-cdp sshd[2498863]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:23:42 nativespace-cdp sshd[2498863]: Failed password for root from 101.36.127.102 port 46010 ssh2
Sep 16 03:23:42 nativespace-cdp sshd[2498863]: Received disconnect from 101.36.127.102 port 46010:11: Bye Bye [preauth]
Sep 16 03:23:42 nativespace-cdp sshd[2498863]: Disconnected from 101.36.127.102 port 46010 [preauth]
Sep 16 03:23:49 nativespace-cdp sshd[2498892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.82.93.206  user=root
Sep 16 03:23:49 nativespace-cdp sshd[2498892]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:23:52 nativespace-cdp sshd[2498892]: Failed password for root from 103.82.93.206 port 44380 ssh2
Sep 16 03:23:52 nativespace-cdp sshd[2498892]: Received disconnect from 103.82.93.206 port 44380:11: Bye Bye [preauth]
Sep 16 03:23:52 nativespace-cdp sshd[2498892]: Disconnected from 103.82.93.206 port 44380 [preauth]
Sep 16 03:24:35 nativespace-cdp sshd[2499071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.197.52  user=root
Sep 16 03:24:35 nativespace-cdp sshd[2499071]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:24:37 nativespace-cdp sshd[2499071]: Failed password for root from 36.67.197.52 port 55540 ssh2
Sep 16 03:24:40 nativespace-cdp sshd[2499071]: Received disconnect from 36.67.197.52 port 55540:11: Bye Bye [preauth]
Sep 16 03:24:40 nativespace-cdp sshd[2499071]: Disconnected from 36.67.197.52 port 55540 [preauth]
Sep 16 03:26:18 nativespace-cdp sshd[2499554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.85.88.204  user=root
Sep 16 03:26:18 nativespace-cdp sshd[2499554]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:26:20 nativespace-cdp sshd[2499554]: Failed password for root from 189.85.88.204 port 34148 ssh2
Sep 16 03:26:20 nativespace-cdp sshd[2499554]: Received disconnect from 189.85.88.204 port 34148:11: Bye Bye [preauth]
Sep 16 03:26:20 nativespace-cdp sshd[2499554]: Disconnected from 189.85.88.204 port 34148 [preauth]
Sep 16 03:26:36 nativespace-cdp sshd[2499599]: Connection closed by 159.100.136.21 port 37804 [preauth]
Sep 16 03:27:22 nativespace-cdp sshd[2499742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.176.91.109  user=root
Sep 16 03:27:22 nativespace-cdp sshd[2499742]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:27:24 nativespace-cdp sshd[2499742]: Failed password for root from 69.176.91.109 port 60328 ssh2
Sep 16 03:27:31 nativespace-cdp sshd[2499742]: Received disconnect from 69.176.91.109 port 60328:11: Bye Bye [preauth]
Sep 16 03:27:31 nativespace-cdp sshd[2499742]: Disconnected from 69.176.91.109 port 60328 [preauth]
Sep 16 03:28:32 nativespace-cdp sshd[2499924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.190.221  user=root
Sep 16 03:28:32 nativespace-cdp sshd[2499924]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:28:34 nativespace-cdp sshd[2499924]: Failed password for root from 152.32.190.221 port 29196 ssh2
Sep 16 03:28:34 nativespace-cdp sshd[2499924]: Received disconnect from 152.32.190.221 port 29196:11: Bye Bye [preauth]
Sep 16 03:28:34 nativespace-cdp sshd[2499924]: Disconnected from 152.32.190.221 port 29196 [preauth]
Sep 16 03:28:51 nativespace-cdp sshd[2499970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.30.96  user=root
Sep 16 03:28:51 nativespace-cdp sshd[2499970]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:28:53 nativespace-cdp sshd[2499970]: Failed password for root from 103.200.30.96 port 48998 ssh2
Sep 16 03:28:53 nativespace-cdp sshd[2499970]: Received disconnect from 103.200.30.96 port 48998:11: Bye Bye [preauth]
Sep 16 03:28:53 nativespace-cdp sshd[2499970]: Disconnected from 103.200.30.96 port 48998 [preauth]
Sep 16 03:29:14 nativespace-cdp sshd[2500124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.217.179  user=root
Sep 16 03:29:14 nativespace-cdp sshd[2500124]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:29:16 nativespace-cdp sshd[2500124]: Failed password for root from 188.166.217.179 port 45686 ssh2
Sep 16 03:29:16 nativespace-cdp sshd[2500124]: Received disconnect from 188.166.217.179 port 45686:11: Bye Bye [preauth]
Sep 16 03:29:16 nativespace-cdp sshd[2500124]: Disconnected from 188.166.217.179 port 45686 [preauth]
Sep 16 03:29:24 nativespace-cdp sshd[2500151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.32.56  user=root
Sep 16 03:29:24 nativespace-cdp sshd[2500151]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:29:26 nativespace-cdp sshd[2500147]: Connection closed by 101.36.127.102 port 46188 [preauth]
Sep 16 03:29:26 nativespace-cdp sshd[2500151]: Failed password for root from 206.189.32.56 port 34458 ssh2
Sep 16 03:29:26 nativespace-cdp sshd[2500151]: Received disconnect from 206.189.32.56 port 34458:11: Bye Bye [preauth]
Sep 16 03:29:26 nativespace-cdp sshd[2500151]: Disconnected from 206.189.32.56 port 34458 [preauth]
Sep 16 03:29:35 nativespace-cdp sshd[2500165]: Connection reset by 152.32.190.221 port 44314 [preauth]
Sep 16 03:29:42 nativespace-cdp sshd[2500187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.30.96  user=root
Sep 16 03:29:42 nativespace-cdp sshd[2500187]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:29:44 nativespace-cdp sshd[2500204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.197.52  user=root
Sep 16 03:29:44 nativespace-cdp sshd[2500204]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:29:44 nativespace-cdp sshd[2500187]: Failed password for root from 103.200.30.96 port 33992 ssh2
Sep 16 03:29:45 nativespace-cdp sshd[2500187]: Received disconnect from 103.200.30.96 port 33992:11: Bye Bye [preauth]
Sep 16 03:29:45 nativespace-cdp sshd[2500187]: Disconnected from 103.200.30.96 port 33992 [preauth]
Sep 16 03:29:46 nativespace-cdp sshd[2500204]: Failed password for root from 36.67.197.52 port 38654 ssh2
Sep 16 03:29:46 nativespace-cdp sshd[2500204]: Received disconnect from 36.67.197.52 port 38654:11: Bye Bye [preauth]
Sep 16 03:29:46 nativespace-cdp sshd[2500204]: Disconnected from 36.67.197.52 port 38654 [preauth]
Sep 16 03:29:53 nativespace-cdp sshd[2500236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.220.39  user=root
Sep 16 03:29:53 nativespace-cdp sshd[2500236]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:29:55 nativespace-cdp sshd[2500236]: Failed password for root from 152.32.220.39 port 38698 ssh2
Sep 16 03:29:55 nativespace-cdp sshd[2500236]: Received disconnect from 152.32.220.39 port 38698:11: Bye Bye [preauth]
Sep 16 03:29:55 nativespace-cdp sshd[2500236]: Disconnected from 152.32.220.39 port 38698 [preauth]
Sep 16 03:30:05 nativespace-cdp sshd[2500425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.217.179  user=root
Sep 16 03:30:05 nativespace-cdp sshd[2500425]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:06 nativespace-cdp sshd[2500414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.85.88.204  user=root
Sep 16 03:30:06 nativespace-cdp sshd[2500414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:07 nativespace-cdp sshd[2500425]: Failed password for root from 188.166.217.179 port 39332 ssh2
Sep 16 03:30:07 nativespace-cdp sshd[2500425]: Received disconnect from 188.166.217.179 port 39332:11: Bye Bye [preauth]
Sep 16 03:30:07 nativespace-cdp sshd[2500425]: Disconnected from 188.166.217.179 port 39332 [preauth]
Sep 16 03:30:08 nativespace-cdp sshd[2500414]: Failed password for root from 189.85.88.204 port 38886 ssh2
Sep 16 03:30:12 nativespace-cdp sshd[2500414]: Received disconnect from 189.85.88.204 port 38886:11: Bye Bye [preauth]
Sep 16 03:30:12 nativespace-cdp sshd[2500414]: Disconnected from 189.85.88.204 port 38886 [preauth]
Sep 16 03:30:14 nativespace-cdp sshd[2500471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.190.221  user=root
Sep 16 03:30:14 nativespace-cdp sshd[2500471]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:15 nativespace-cdp sshd[2500477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.32.56  user=root
Sep 16 03:30:15 nativespace-cdp sshd[2500477]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:16 nativespace-cdp sshd[2500471]: Failed password for root from 152.32.190.221 port 59378 ssh2
Sep 16 03:30:17 nativespace-cdp sshd[2500519]: Connection closed by 101.36.127.102 port 46224 [preauth]
Sep 16 03:30:18 nativespace-cdp sshd[2500477]: Failed password for root from 206.189.32.56 port 40408 ssh2
Sep 16 03:30:30 nativespace-cdp sshd[2500564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.176.91.109  user=root
Sep 16 03:30:30 nativespace-cdp sshd[2500564]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:31 nativespace-cdp sshd[2500564]: Failed password for root from 69.176.91.109 port 33788 ssh2
Sep 16 03:30:32 nativespace-cdp sshd[2500564]: Received disconnect from 69.176.91.109 port 33788:11: Bye Bye [preauth]
Sep 16 03:30:32 nativespace-cdp sshd[2500564]: Disconnected from 69.176.91.109 port 33788 [preauth]
Sep 16 03:30:32 nativespace-cdp sshd[2500575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.30.96  user=root
Sep 16 03:30:32 nativespace-cdp sshd[2500575]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:34 nativespace-cdp sshd[2500575]: Failed password for root from 103.200.30.96 port 46722 ssh2
Sep 16 03:30:39 nativespace-cdp sshd[2500596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.197.52  user=root
Sep 16 03:30:39 nativespace-cdp sshd[2500596]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:41 nativespace-cdp sshd[2500596]: Failed password for root from 36.67.197.52 port 51494 ssh2
Sep 16 03:30:41 nativespace-cdp sshd[2500596]: Received disconnect from 36.67.197.52 port 51494:11: Bye Bye [preauth]
Sep 16 03:30:41 nativespace-cdp sshd[2500596]: Disconnected from 36.67.197.52 port 51494 [preauth]
Sep 16 03:30:53 nativespace-cdp sshd[2500677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.85.88.204  user=root
Sep 16 03:30:53 nativespace-cdp sshd[2500677]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:30:55 nativespace-cdp sshd[2500677]: Failed password for root from 189.85.88.204 port 56982 ssh2
Sep 16 03:30:57 nativespace-cdp sshd[2500677]: Received disconnect from 189.85.88.204 port 56982:11: Bye Bye [preauth]
Sep 16 03:30:57 nativespace-cdp sshd[2500677]: Disconnected from 189.85.88.204 port 56982 [preauth]
Sep 16 03:30:59 nativespace-cdp sshd[2500746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.127.102  user=root
Sep 16 03:30:59 nativespace-cdp sshd[2500746]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:31:01 nativespace-cdp sshd[2500746]: Failed password for root from 101.36.127.102 port 46264 ssh2
Sep 16 03:31:01 nativespace-cdp sshd[2500746]: Received disconnect from 101.36.127.102 port 46264:11: Bye Bye [preauth]
Sep 16 03:31:01 nativespace-cdp sshd[2500746]: Disconnected from 101.36.127.102 port 46264 [preauth]
Sep 16 03:31:15 nativespace-cdp sshd[2500905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.82.93.206  user=root
Sep 16 03:31:15 nativespace-cdp sshd[2500905]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:31:18 nativespace-cdp sshd[2500905]: Failed password for root from 103.82.93.206 port 37868 ssh2
Sep 16 03:31:18 nativespace-cdp sshd[2500905]: Received disconnect from 103.82.93.206 port 37868:11: Bye Bye [preauth]
Sep 16 03:31:18 nativespace-cdp sshd[2500905]: Disconnected from 103.82.93.206 port 37868 [preauth]
Sep 16 03:31:33 nativespace-cdp sshd[2500950]: Connection closed by 159.100.136.21 port 46256 [preauth]
Sep 16 03:31:33 nativespace-cdp sshd[2500943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.176.91.109  user=root
Sep 16 03:31:33 nativespace-cdp sshd[2500943]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:31:36 nativespace-cdp sshd[2500943]: Failed password for root from 69.176.91.109 port 49004 ssh2
Sep 16 03:31:36 nativespace-cdp sshd[2500943]: Received disconnect from 69.176.91.109 port 49004:11: Bye Bye [preauth]
Sep 16 03:31:36 nativespace-cdp sshd[2500943]: Disconnected from 69.176.91.109 port 49004 [preauth]
Sep 16 03:31:47 nativespace-cdp sshd[2501010]: Connection closed by 101.36.127.102 port 46302 [preauth]
Sep 16 03:32:09 nativespace-cdp sshd[2501066]: Connection closed by 103.82.93.206 port 37750 [preauth]
Sep 16 03:32:26 nativespace-cdp sshd[2501102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.127.102  user=root
Sep 16 03:32:26 nativespace-cdp sshd[2501102]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:32:27 nativespace-cdp sshd[2501102]: Failed password for root from 101.36.127.102 port 46342 ssh2
Sep 16 03:32:58 nativespace-cdp sshd[2501183]: Received disconnect from 103.82.93.206 port 49390:11: Bye Bye [preauth]
Sep 16 03:32:58 nativespace-cdp sshd[2501183]: Disconnected from 103.82.93.206 port 49390 [preauth]
Sep 16 03:33:21 nativespace-cdp sshd[2501318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.220.39  user=root
Sep 16 03:33:21 nativespace-cdp sshd[2501318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:33:23 nativespace-cdp sshd[2501318]: Failed password for root from 152.32.220.39 port 28070 ssh2
Sep 16 03:33:24 nativespace-cdp sshd[2501318]: Received disconnect from 152.32.220.39 port 28070:11: Bye Bye [preauth]
Sep 16 03:33:24 nativespace-cdp sshd[2501318]: Disconnected from 152.32.220.39 port 28070 [preauth]
Sep 16 03:33:39 nativespace-cdp sshd[2501396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.82.93.206  user=root
Sep 16 03:33:39 nativespace-cdp sshd[2501396]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 03:33:41 nativespace-cdp sshd[2501396]: Failed password for root from 103.82.93.206 port 54834 ssh2
Sep 16 03:33:43 nativespace-cdp sshd[2501396]: Received disconnect from 103.82.93.206 port 54834:11: Bye Bye [preauth]
Sep 16 03:33:43 nativespace-cdp sshd[2501396]: Disconnected from 103.82.93.206 port 54834 [preauth]
Sep 16 03:36:33 nativespace-cdp sshd[2502388]: Connection closed by 159.100.136.21 port 54544 [preauth]
Sep 16 03:41:34 nativespace-cdp sshd[2503577]: Connection closed by 159.100.136.21 port 35464 [preauth]
Sep 16 03:46:33 nativespace-cdp sshd[2505049]: Connection closed by 159.100.136.21 port 43168 [preauth]
Sep 16 03:50:14 nativespace-cdp sshd[2505662]: Connection closed by 206.168.34.213 port 39884 [preauth]
Sep 16 03:51:35 nativespace-cdp sshd[2506120]: Connection closed by 159.100.136.21 port 52426 [preauth]
Sep 16 03:51:51 nativespace-cdp sshd[2506124]: Connection closed by 206.168.34.51 port 33608 [preauth]
Sep 16 03:56:33 nativespace-cdp sshd[2507311]: Connection closed by 159.100.136.21 port 33400 [preauth]
Sep 16 04:01:36 nativespace-cdp sshd[2508843]: Connection closed by 159.100.136.21 port 41924 [preauth]
Sep 16 04:06:33 nativespace-cdp sshd[2509876]: Connection closed by 159.100.136.21 port 51228 [preauth]
Sep 16 04:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 04:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:55 nativespace-cdp sudo[2510438]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 04:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:55 nativespace-cdp sudo[2510441]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 04:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:56 nativespace-cdp sudo[2510444]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 04:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:56 nativespace-cdp sudo[2510449]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 04:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510452]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510464]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510467]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510470]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510474]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510477]: pam_unix(sudo:session): session closed for user root
Sep 16 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:09:59 nativespace-cdp sudo[2510482]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:06 nativespace-cdp sudo[2510672]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:07 nativespace-cdp sudo[2510678]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=vivienn1 user-2=firstre2 user-3=oneoarco user-4=battlere user-5=nstriton user-6=brighto1 user-7=newstoda user-8=ggaaorgu user-9=belle user-10=bemadonn user-11=bedfords user-12=skyfirec user-13=alexadmin user-14=nativene user-15=innovat1 user-16=stuartge user-17=askhform user-18=coursemc user-19=opaiscyx user-20=ultbcrra user-21=seftvta user-22=jonhartl user-23=firstres user-24=firstred user-25=highlegh user-26=southlon user-27=clarkass user-28=firstrel user-29=costestimatorco user-30=putterfi user-31=hubmaster user-32=fetch user-33=carsinyo user-34=milloyco user-35=gilpin user-36=elecleis user-37=connectedshoppin user-38=thqkgnbz user-39=accooper user-40=ianrayne user-41=strathar user-42=atestord user-43=sarafoundation user-44=brmrjxl user-45=lakesan1 user-46=megacards user-47=musorguk
Sep 16 04:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=dickemery123 user-50=ptkxhsbt user-51=martsblo user-52=magichat user-53=hhdugcor user-54=lbhyisi user-55=vantagep user-56=athenare user-57=connect9 user-58=lbscrmod user-59=maflemin user-60=markward user-61=foundation user-62=booff user-63=ulsukarm user-64=spectrum user-65=hodgesonweb user-66=theblack user-67=jarvisin user-68=stephani user-69=leereyn1 user-70=agproduc user-71=still user-72=boldover user-73=nove user-74=bakery user-75=crrtipdl user-76=sosevalu user-77=havantho user-78=cath user-79=sketchy user-80=nvihkvu user-81=oubpgvbx user-82=tstardom user-83=what user-84=design user-85=dancinggardener user-86=stagingerris user-87=ladburyp user-88=kategilpin user-89=jennimil user-90=tomandle user-91=david user-92=nbhavers user-93=careers user-94=chrisdal user-95=mcdermos user-96=onlycont user-97=lucy user-98=attlebor user-99=romaldki user-100=hodgsonmail user-101=ranxterc
Sep 16 04:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=outdoorc user-103=branko user-104=lkpier user-105=donnychicago user-106=steakbridieme user-107=firstre5 user-108=philmcph user-109=ctedorgu user-110=nscdp user-111=putterfc user-112=leftie user-113=foods user-114=health2045 user-115=fortunaz user-116=nomistakes user-117=hidden user-118=barbersh user-119=tigerlet user-120=smrszyqg user-121=isleofwi user-122=cwsocial user-123=pugwash user-124=paulmca1 user-125=howardon user-126=cathski user-127=cambria1 user-128=ninejimm user-129=reliable user-130=eugincou user-131=courseme user-132=hirefootballgame user-133=asandcoc user-134=sibtoncc user-135=steve user-136=bwppodcast user-137=zebrapho user-138=nsceres user-139=fawcettd user-140=burydropin user-141=dhyana user-142=beauty user-143=darkstar user-144=eatspam feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 16 04:10:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 04:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:09 nativespace-cdp sudo[2510683]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 04:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:10 nativespace-cdp sudo[2510694]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WxTNF4P0SU1fBrg6.~
Sep 16 04:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:10 nativespace-cdp sudo[2510697]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WxTNF4P0SU1fBrg6.~'
Sep 16 04:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:10 nativespace-cdp sudo[2510701]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WxTNF4P0SU1fBrg6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 04:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:10 nativespace-cdp sudo[2510705]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 04:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:10 nativespace-cdp sudo[2510708]: pam_unix(sudo:session): session closed for user root
Sep 16 04:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 04:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:10:17 nativespace-cdp sudo[2510740]: pam_unix(sudo:session): session closed for user root
Sep 16 04:11:33 nativespace-cdp sshd[2511074]: Connection closed by 159.100.136.21 port 60206 [preauth]
Sep 16 04:16:34 nativespace-cdp sshd[2512513]: Connection closed by 159.100.136.21 port 41040 [preauth]
Sep 16 04:21:33 nativespace-cdp sshd[2513773]: Connection closed by 159.100.136.21 port 50072 [preauth]
Sep 16 04:26:33 nativespace-cdp sshd[2514850]: Connection closed by 159.100.136.21 port 59414 [preauth]
Sep 16 04:27:15 nativespace-cdp sshd[2514961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.54.224  user=root
Sep 16 04:27:15 nativespace-cdp sshd[2514961]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:27:18 nativespace-cdp sshd[2514961]: Failed password for root from 178.128.54.224 port 41278 ssh2
Sep 16 04:27:18 nativespace-cdp sshd[2514961]: Received disconnect from 178.128.54.224 port 41278:11: Bye Bye [preauth]
Sep 16 04:27:18 nativespace-cdp sshd[2514961]: Disconnected from 178.128.54.224 port 41278 [preauth]
Sep 16 04:27:45 nativespace-cdp sshd[2515033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.95.174.173  user=root
Sep 16 04:27:45 nativespace-cdp sshd[2515033]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:27:48 nativespace-cdp sshd[2515033]: Failed password for root from 200.95.174.173 port 59148 ssh2
Sep 16 04:27:48 nativespace-cdp sshd[2515033]: Received disconnect from 200.95.174.173 port 59148:11: Bye Bye [preauth]
Sep 16 04:27:48 nativespace-cdp sshd[2515033]: Disconnected from 200.95.174.173 port 59148 [preauth]
Sep 16 04:30:37 nativespace-cdp sshd[2515885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.54.224  user=root
Sep 16 04:30:37 nativespace-cdp sshd[2515885]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:30:39 nativespace-cdp sshd[2515885]: Failed password for root from 178.128.54.224 port 40626 ssh2
Sep 16 04:30:45 nativespace-cdp sshd[2515885]: Received disconnect from 178.128.54.224 port 40626:11: Bye Bye [preauth]
Sep 16 04:30:45 nativespace-cdp sshd[2515885]: Disconnected from 178.128.54.224 port 40626 [preauth]
Sep 16 04:31:16 nativespace-cdp sshd[2516030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.183.74.205  user=root
Sep 16 04:31:16 nativespace-cdp sshd[2516030]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:31:18 nativespace-cdp sshd[2516030]: Failed password for root from 103.183.74.205 port 36318 ssh2
Sep 16 04:31:26 nativespace-cdp sshd[2516030]: Received disconnect from 103.183.74.205 port 36318:11: Bye Bye [preauth]
Sep 16 04:31:26 nativespace-cdp sshd[2516030]: Disconnected from 103.183.74.205 port 36318 [preauth]
Sep 16 04:31:27 nativespace-cdp sshd[2516084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.54.224  user=root
Sep 16 04:31:27 nativespace-cdp sshd[2516084]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:31:29 nativespace-cdp sshd[2516084]: Failed password for root from 178.128.54.224 port 53278 ssh2
Sep 16 04:31:30 nativespace-cdp sshd[2516084]: Received disconnect from 178.128.54.224 port 53278:11: Bye Bye [preauth]
Sep 16 04:31:30 nativespace-cdp sshd[2516084]: Disconnected from 178.128.54.224 port 53278 [preauth]
Sep 16 04:31:32 nativespace-cdp sshd[2516121]: Connection closed by 159.100.136.21 port 40330 [preauth]
Sep 16 04:31:50 nativespace-cdp sshd[2516183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.83.5.26  user=root
Sep 16 04:31:50 nativespace-cdp sshd[2516183]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:31:52 nativespace-cdp sshd[2516183]: Failed password for root from 47.83.5.26 port 35222 ssh2
Sep 16 04:31:55 nativespace-cdp sshd[2516183]: Received disconnect from 47.83.5.26 port 35222:11: Bye Bye [preauth]
Sep 16 04:31:55 nativespace-cdp sshd[2516183]: Disconnected from 47.83.5.26 port 35222 [preauth]
Sep 16 04:32:20 nativespace-cdp sshd[2516295]: Connection closed by 47.83.5.26 port 40840 [preauth]
Sep 16 04:32:31 nativespace-cdp sshd[2516342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.83.5.26  user=root
Sep 16 04:32:31 nativespace-cdp sshd[2516342]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:32:33 nativespace-cdp sshd[2516342]: Failed password for root from 47.83.5.26 port 40922 ssh2
Sep 16 04:32:36 nativespace-cdp sshd[2516342]: Received disconnect from 47.83.5.26 port 40922:11: Bye Bye [preauth]
Sep 16 04:32:36 nativespace-cdp sshd[2516342]: Disconnected from 47.83.5.26 port 40922 [preauth]
Sep 16 04:32:41 nativespace-cdp sshd[2516439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.183.74.205  user=root
Sep 16 04:32:41 nativespace-cdp sshd[2516439]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:32:42 nativespace-cdp sshd[2516449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.83.5.26  user=root
Sep 16 04:32:42 nativespace-cdp sshd[2516449]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:32:43 nativespace-cdp sshd[2516439]: Failed password for root from 103.183.74.205 port 33310 ssh2
Sep 16 04:32:44 nativespace-cdp sshd[2516449]: Failed password for root from 47.83.5.26 port 37574 ssh2
Sep 16 04:32:47 nativespace-cdp sshd[2516449]: Received disconnect from 47.83.5.26 port 37574:11: Bye Bye [preauth]
Sep 16 04:32:47 nativespace-cdp sshd[2516449]: Disconnected from 47.83.5.26 port 37574 [preauth]
Sep 16 04:32:49 nativespace-cdp sshd[2516439]: Received disconnect from 103.183.74.205 port 33310:11: Bye Bye [preauth]
Sep 16 04:32:49 nativespace-cdp sshd[2516439]: Disconnected from 103.183.74.205 port 33310 [preauth]
Sep 16 04:33:43 nativespace-cdp sshd[2517126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.183.74.205  user=root
Sep 16 04:33:43 nativespace-cdp sshd[2517126]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:33:45 nativespace-cdp sshd[2517126]: Failed password for root from 103.183.74.205 port 46944 ssh2
Sep 16 04:36:33 nativespace-cdp sshd[2518819]: Connection closed by 159.100.136.21 port 49468 [preauth]
Sep 16 04:41:33 nativespace-cdp sshd[2520504]: Connection closed by 159.100.136.21 port 58220 [preauth]
Sep 16 04:41:54 nativespace-cdp sshd[2520553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.95.174.173  user=root
Sep 16 04:41:54 nativespace-cdp sshd[2520553]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:41:55 nativespace-cdp sshd[2520553]: Failed password for root from 200.95.174.173 port 45596 ssh2
Sep 16 04:41:55 nativespace-cdp sshd[2520553]: Received disconnect from 200.95.174.173 port 45596:11: Bye Bye [preauth]
Sep 16 04:41:55 nativespace-cdp sshd[2520553]: Disconnected from 200.95.174.173 port 45596 [preauth]
Sep 16 04:42:41 nativespace-cdp sshd[2520672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.95.174.173  user=root
Sep 16 04:42:41 nativespace-cdp sshd[2520672]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 04:42:43 nativespace-cdp sshd[2520672]: Failed password for root from 200.95.174.173 port 44112 ssh2
Sep 16 04:42:43 nativespace-cdp sshd[2520672]: Received disconnect from 200.95.174.173 port 44112:11: Bye Bye [preauth]
Sep 16 04:42:43 nativespace-cdp sshd[2520672]: Disconnected from 200.95.174.173 port 44112 [preauth]
Sep 16 04:46:32 nativespace-cdp sshd[2521799]: Connection closed by 159.100.136.21 port 39202 [preauth]
Sep 16 04:51:33 nativespace-cdp sshd[2523058]: Connection closed by 159.100.136.21 port 48090 [preauth]
Sep 16 04:56:33 nativespace-cdp sshd[2524159]: Connection closed by 159.100.136.21 port 57572 [preauth]
Sep 16 04:56:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 04:56:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:56:59 nativespace-cdp sudo[2524228]: pam_unix(sudo:session): session closed for user root
Sep 16 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:56:59 nativespace-cdp sudo[2524234]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:03 nativespace-cdp sudo[2524264]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=innovat1 user-4=stuartge user-5=askhform user-6=nativene user-7=nstriton user-8=brighto1 user-9=vivienn1 user-10=firstre2 user-11=oneoarco user-12=battlere user-13=bedfords user-14=newstoda user-15=belle user-16=ggaaorgu user-17=bemadonn user-18=milloyco user-19=gilpin user-20=elecleis user-21=hubmaster user-22=putterfi user-23=fetch user-24=carsinyo user-25=accooper user-26=ianrayne user-27=connectedshoppin user-28=thqkgnbz user-29=ultbcrra user-30=jonhartl user-31=seftvta user-32=firstres user-33=coursemc user-34=opaiscyx user-35=clarkass user-36=firstrel user-37=costestimatorco user-38=firstred user-39=highlegh user-40=southlon user-41=martsblo user-42=dickemery123 user-43=ptkxhsbt user-44=hhdugcor user-45=lbhyisi user-46=magichat user-47=lakesan1
Sep 16 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=brmrjxl user-49=strathar user-50=atestord user-51=sarafoundation user-52=wilsonsw user-53=megacards user-54=musorguk user-55=jarvisin user-56=spectrum user-57=hodgesonweb user-58=theblack user-59=agproduc user-60=still user-61=stephani user-62=leereyn1 user-63=markward user-64=booff user-65=foundation user-66=vantagep user-67=athenare user-68=connect9 user-69=lbscrmod user-70=maflemin user-71=ulsukarm user-72=tstardom user-73=oubpgvbx user-74=what user-75=havantho user-76=sketchy user-77=cath user-78=nvihkvu user-79=stagingerris user-80=dancinggardener user-81=ladburyp user-82=kategilpin user-83=design user-84=nove user-85=boldover user-86=bakery user-87=crrtipdl user-88=sosevalu user-89=lucy user-90=attlebor user-91=onlycont user-92=ranxterc user-93=hodgsonmail user-94=outdoorc user-95=branko user-96=romaldki user-97=tomandle user-98=jennimil user-99=chrisdal user-100=mcdermos user-101=david
Sep 16 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nbhavers user-103=careers user-104=cambria1 user-105=cathski user-106=ninejimm user-107=reliable user-108=cwsocial user-109=paulmca1 user-110=pugwash user-111=howardon user-112=hirefootballgame user-113=eugincou user-114=courseme user-115=nscdp user-116=putterfc user-117=foods user-118=leftie user-119=health2045 user-120=fortunaz user-121=lkpier user-122=firstre5 user-123=steakbridieme user-124=donnychicago user-125=philmcph user-126=ctedorgu user-127=isleofwi user-128=smrszyqg user-129=nomistakes user-130=hidden user-131=tigerlet user-132=barbersh user-133=fawcettd user-134=burydropin user-135=nsceres user-136=beauty user-137=darkstar user-138=eatspam user-139=dhyana user-140=asandcoc user-141=sibtoncc user-142=bwppodcast user-143=zebrapho user-144=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 16 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:04 nativespace-cdp sudo[2524270]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 16 04:57:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:06 nativespace-cdp sudo[2524279]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 16 04:57:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:06 nativespace-cdp sudo[2524288]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 16 04:57:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:57:36 nativespace-cdp sudo[2524411]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:57:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 16 04:57:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:37 nativespace-cdp sudo[2524417]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 16 04:57:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:39 nativespace-cdp sudo[2524422]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 16 04:57:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:41 nativespace-cdp sudo[2524433]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 16 04:57:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:41 nativespace-cdp sudo[2524483]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 16 04:57:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:44 nativespace-cdp sudo[2524528]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 16 04:57:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:48 nativespace-cdp sudo[2524541]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 16 04:57:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:49 nativespace-cdp sudo[2524553]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 16 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:49 nativespace-cdp sudo[2524557]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 16 04:57:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:57:55 nativespace-cdp sudo[2524634]: pam_unix(sudo:session): session closed for user root
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 04:57:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:57:58 nativespace-cdp sudo[2524693]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:57:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:57:58 nativespace-cdp sudo[2524700]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 16 04:57:58 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:57:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:58:00 nativespace-cdp sudo[2524706]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:58:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 16 04:58:00 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 16 04:58:00 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 16 04:58:00 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:58:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:58:02 nativespace-cdp sudo[2524713]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 04:58:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:58:12 nativespace-cdp sudo[2524847]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:58:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:58:12 nativespace-cdp sudo[2524853]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:58:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:58:12 nativespace-cdp sudo[2524859]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 16 04:58:12 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:58:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 04:58:12 nativespace-cdp sudo[2524865]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 16 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:14 nativespace-cdp sudo[2524900]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 16 04:58:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:14 nativespace-cdp sudo[2524905]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 16 04:58:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:58:37 nativespace-cdp sudo[2525013]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:58:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 16 04:58:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:38 nativespace-cdp sudo[2525020]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 16 04:58:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:38 nativespace-cdp sudo[2525027]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 16 04:58:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:39 nativespace-cdp sudo[2525032]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 16 04:58:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:39 nativespace-cdp sudo[2525039]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 16 04:58:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:43 nativespace-cdp sudo[2525059]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 16 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:43 nativespace-cdp sudo[2525065]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 16 04:58:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:58:50 nativespace-cdp sudo[2525139]: pam_unix(sudo:session): session closed for user root
Sep 16 04:58:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 04:58:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:58:52 nativespace-cdp sudo[2525212]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:58:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 16 04:58:52 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 16 04:58:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 16 04:58:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:58:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:58:53 nativespace-cdp sudo[2525218]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:58:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 16 04:58:53 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 16 04:58:53 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 16 04:58:53 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:58:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:59:16 nativespace-cdp sudo[2525225]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:59:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 04:59:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:59:27 nativespace-cdp sudo[2525417]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:59:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:59:27 nativespace-cdp sudo[2525424]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 16 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 04:59:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 04:59:27 nativespace-cdp sudo[2525430]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 04:59:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 16 04:59:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:59:29 nativespace-cdp sudo[2525468]: pam_unix(sudo:session): session closed for user root
Sep 16 04:59:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 16 04:59:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 04:59:30 nativespace-cdp sudo[2525473]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 16 05:00:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:10 nativespace-cdp sudo[2525939]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 16 05:00:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:11 nativespace-cdp sudo[2525946]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 16 05:00:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:11 nativespace-cdp sudo[2525952]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 16 05:00:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:11 nativespace-cdp sudo[2525957]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 16 05:00:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:13 nativespace-cdp sudo[2525972]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 16 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:13 nativespace-cdp sudo[2525978]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 16 05:00:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:23 nativespace-cdp sudo[2526065]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 05:00:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:26 nativespace-cdp sudo[2526122]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 16 05:00:26 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 16 05:00:26 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 16 05:00:26 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:00:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:27 nativespace-cdp sudo[2526128]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 16 05:00:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 16 05:00:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 16 05:00:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:00:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:41 nativespace-cdp sudo[2526134]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 16 05:00:41 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 16 05:00:41 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 16 05:00:41 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:00:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:42 nativespace-cdp sudo[2526167]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 05:00:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:49 nativespace-cdp sudo[2526275]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:00:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:49 nativespace-cdp sudo[2526282]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:00:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:49 nativespace-cdp sudo[2526288]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 16 05:00:49 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:00:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 05:00:49 nativespace-cdp sudo[2526294]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 05:00:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 16 05:00:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:52 nativespace-cdp sudo[2526340]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 16 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:52 nativespace-cdp sudo[2526350]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 16 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:53 nativespace-cdp sudo[2526363]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 16 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:53 nativespace-cdp sudo[2526370]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 16 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 16 05:00:54 nativespace-cdp sudo[2526381]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 16 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 16 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:54 nativespace-cdp sudo[2526387]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 16 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:54 nativespace-cdp sudo[2526391]: pam_unix(sudo:session): session closed for user root
Sep 16 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 16 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:00:54 nativespace-cdp sudo[2526395]: pam_unix(sudo:session): session closed for user root
Sep 16 05:01:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 16 05:01:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:07 nativespace-cdp sudo[2526608]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 16 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:01:08 nativespace-cdp sudo[2526623]: pam_unix(sudo:session): session closed for user root
Sep 16 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 16 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:01:08 nativespace-cdp sudo[2526637]: pam_unix(sudo:session): session closed for user root
Sep 16 05:01:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 16 05:01:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:01:11 nativespace-cdp sudo[2526743]: pam_unix(sudo:session): session closed for user root
Sep 16 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 16 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:01:20 nativespace-cdp sudo[2526989]: pam_unix(sudo:session): session closed for user root
Sep 16 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:23 nativespace-cdp sudo[2527114]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 16 05:01:23 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 16 05:01:23 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 16 05:01:23 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:24 nativespace-cdp sudo[2527121]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 16 05:01:25 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 16 05:01:25 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 16 05:01:25 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:37 nativespace-cdp sshd[2527156]: Connection closed by 159.100.136.21 port 38514 [preauth]
Sep 16 05:01:39 nativespace-cdp sudo[2527128]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 16 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:45 nativespace-cdp sudo[2527261]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:45 nativespace-cdp sudo[2527267]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 16 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 16 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 05:01:45 nativespace-cdp sudo[2527273]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 16 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:01:47 nativespace-cdp sudo[2527311]: pam_unix(sudo:session): session closed for user root
Sep 16 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 16 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:01:47 nativespace-cdp sudo[2527317]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 16 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 16 05:02:13 nativespace-cdp sudo[2527428]: pam_unix(sudo:session): session closed for user fortunaz
Sep 16 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 16 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:13 nativespace-cdp sudo[2527435]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 16 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:13 nativespace-cdp sudo[2527441]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 16 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:13 nativespace-cdp sudo[2527445]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 16 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:16 nativespace-cdp sudo[2527463]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 16 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:16 nativespace-cdp sudo[2527469]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 16 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:21 nativespace-cdp sudo[2527533]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=skyfirec WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 16 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:32 nativespace-cdp sudo[2527711]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:37 nativespace-cdp sudo[2527835]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:37 nativespace-cdp sudo[2527839]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:37 nativespace-cdp sudo[2527842]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:37 nativespace-cdp sudo[2527845]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:37 nativespace-cdp sudo[2527848]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:37 nativespace-cdp sudo[2527851]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 16 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527854]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527857]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527860]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527863]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527866]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527869]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527872]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527875]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527878]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527881]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527884]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527887]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527890]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527893]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527896]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527899]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527902]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527905]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527909]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527912]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527915]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527918]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527921]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:38 nativespace-cdp sudo[2527924]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527927]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527930]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527933]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527936]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527939]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527942]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527945]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527948]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527951]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527954]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527958]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527961]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527964]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527967]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527970]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527973]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527976]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527979]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527982]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527985]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527988]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527991]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:39 nativespace-cdp sudo[2527994]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2527997]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528000]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528003]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528006]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528009]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528012]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528015]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528018]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528021]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528024]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528027]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528030]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528033]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528036]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528039]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528043]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528046]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528049]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528052]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528055]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528059]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528062]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528065]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528068]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528074]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528077]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528080]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528083]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528086]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528089]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528093]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:40 nativespace-cdp sudo[2528096]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528099]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528102]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528106]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528109]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528112]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528115]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528118]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528121]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528124]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528127]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528130]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528133]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528136]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528139]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528142]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528145]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528148]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528151]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528154]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528157]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528160]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528164]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528167]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528170]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528173]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528176]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528179]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528182]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528185]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528190]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528193]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528197]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528200]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528203]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:41 nativespace-cdp sudo[2528206]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 16 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528209]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528212]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528216]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528219]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528222]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528226]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528229]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528232]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528235]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528239]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528242]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528245]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528248]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528251]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528254]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528257]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528260]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528263]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528266]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528269]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528272]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528275]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528278]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528281]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528284]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528288]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528291]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528294]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528297]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528300]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528303]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528306]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528309]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528312]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528315]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528318]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528321]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528324]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528327]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:42 nativespace-cdp sudo[2528330]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528333]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528336]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528339]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528342]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528345]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528348]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528351]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528355]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528358]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528361]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528364]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528367]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528370]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528373]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528376]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528379]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528382]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528385]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528388]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528391]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528394]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528397]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528400]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528404]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528407]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528410]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528413]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528416]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528419]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528422]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528425]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528428]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528431]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528434]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528437]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528440]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:43 nativespace-cdp sudo[2528443]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528447]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528451]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528454]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528457]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528460]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528463]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528466]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528469]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528472]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528475]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528478]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528481]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528484]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528487]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528490]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528493]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528496]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528499]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528502]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528505]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528508]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528511]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528514]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528517]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528521]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528524]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528527]: pam_unix(sudo:session): session closed for user root
Sep 16 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 16 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:02:44 nativespace-cdp sudo[2528530]: pam_unix(sudo:session): session closed for user root
Sep 16 05:06:33 nativespace-cdp sshd[2529404]: Connection closed by 159.100.136.21 port 47858 [preauth]
Sep 16 05:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 05:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:09:59 nativespace-cdp sudo[2530110]: pam_unix(sudo:session): session closed for user root
Sep 16 05:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 05:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:09:59 nativespace-cdp sudo[2530113]: pam_unix(sudo:session): session closed for user root
Sep 16 05:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 05:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:09:59 nativespace-cdp sudo[2530116]: pam_unix(sudo:session): session closed for user root
Sep 16 05:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 05:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:09:59 nativespace-cdp sudo[2530122]: pam_unix(sudo:session): session closed for user root
Sep 16 05:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 05:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530125]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 05:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530233]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 05:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530237]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 05:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530241]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 05:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530245]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 05:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530251]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 05:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:02 nativespace-cdp sudo[2530258]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:06 nativespace-cdp sudo[2530289]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:06 nativespace-cdp sudo[2530296]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=mcdermos user-2=chrisdal user-3=nbhavers user-4=careers user-5=david user-6=tomandle user-7=jennimil user-8=branko user-9=ranxterc user-10=outdoorc user-11=hodgsonmail user-12=romaldki user-13=attlebor user-14=lucy user-15=onlycont user-16=sosevalu user-17=crrtipdl user-18=bakery user-19=nove user-20=boldover user-21=kategilpin user-22=ladburyp user-23=dancinggardener user-24=stagingerris user-25=design user-26=what user-27=tstardom user-28=oubpgvbx user-29=nvihkvu user-30=cath user-31=sketchy user-32=havantho user-33=zebrapho user-34=bwppodcast user-35=steve user-36=sibtoncc user-37=asandcoc user-38=eatspam user-39=darkstar user-40=beauty user-41=dhyana user-42=burydropin user-43=fawcettd user-44=nsceres user-45=smrszyqg user-46=isleofwi user-47=barbersh user-48=tigerlet user-49=hidden
Sep 16 05:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=nomistakes user-51=health2045 user-52=fortunaz user-53=leftie user-54=foods user-55=putterfc user-56=nscdp user-57=philmcph user-58=ctedorgu user-59=firstre5 user-60=donnychicago user-61=steakbridieme user-62=lkpier user-63=hirefootballgame user-64=courseme user-65=eugincou user-66=reliable user-67=ninejimm user-68=cathski user-69=cambria1 user-70=paulmca1 user-71=pugwash user-72=howardon user-73=cwsocial user-74=costestimatorco user-75=firstrel user-76=clarkass user-77=southlon user-78=highlegh user-79=firstred user-80=firstres user-81=seftvta user-82=jonhartl user-83=ultbcrra user-84=opaiscyx user-85=coursemc user-86=ianrayne user-87=accooper user-88=thqkgnbz user-89=connectedshoppin user-90=elecleis user-91=milloyco user-92=gilpin user-93=carsinyo user-94=fetch user-95=hubmaster user-96=putterfi user-97=bedfords user-98=bemadonn user-99=ggaaorgu user-100=belle user-101=newstoda user-102=brighto1
Sep 16 05:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=nstriton user-104=battlere user-105=oneoarco user-106=firstre2 user-107=vivienn1 user-108=askhform user-109=stuartge user-110=innovat1 user-111=nativene user-112=skyfirec user-113=alexadmin user-114=ulsukarm user-115=foundation user-116=booff user-117=markward user-118=maflemin user-119=lbscrmod user-120=athenare user-121=connect9 user-122=vantagep user-123=still user-124=agproduc user-125=leereyn1 user-126=stephani user-127=jarvisin user-128=theblack user-129=hodgesonweb user-130=spectrum user-131=wilsonsw user-132=musorguk user-133=megacards user-134=brmrjxl user-135=lakesan1 user-136=sarafoundation user-137=atestord user-138=strathar user-139=lbhyisi user-140=hhdugcor user-141=magichat user-142=martsblo user-143=ptkxhsbt user-144=dickemery123 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 05:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:07 nativespace-cdp sudo[2530302]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:07 nativespace-cdp sudo[2530306]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3IdZs7Pq7mBl80Nx.~
Sep 16 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:07 nativespace-cdp sudo[2530310]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3IdZs7Pq7mBl80Nx.~'
Sep 16 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:07 nativespace-cdp sudo[2530313]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3IdZs7Pq7mBl80Nx.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:07 nativespace-cdp sudo[2530317]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 05:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:07 nativespace-cdp sudo[2530320]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 05:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:10:10 nativespace-cdp sudo[2530339]: pam_unix(sudo:session): session closed for user root
Sep 16 05:10:34 nativespace-cdp sshd[2530370]: Connection closed by 167.94.145.98 port 40088 [preauth]
Sep 16 05:11:33 nativespace-cdp sshd[2530641]: Connection closed by 159.100.136.21 port 57080 [preauth]
Sep 16 05:14:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 05:14:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 05:14:02 nativespace-cdp sudo[2531094]: pam_unix(sudo:session): session closed for user root
Sep 16 05:16:35 nativespace-cdp sshd[2532177]: Connection closed by 159.100.136.21 port 38312 [preauth]
Sep 16 05:21:33 nativespace-cdp sshd[2533227]: Connection closed by 159.100.136.21 port 47000 [preauth]
Sep 16 05:26:33 nativespace-cdp sshd[2534194]: Connection closed by 159.100.136.21 port 56270 [preauth]
Sep 16 05:31:33 nativespace-cdp sshd[2535730]: Connection closed by 159.100.136.21 port 36506 [preauth]
Sep 16 05:35:08 nativespace-cdp su: pam_unix(su:session): session opened for user jonhartl by (uid=0)
Sep 16 05:35:09 nativespace-cdp su[2536542]: pam_unix(su:session): session closed for user jonhartl
Sep 16 05:36:37 nativespace-cdp sshd[2536805]: Connection closed by 159.100.136.21 port 45856 [preauth]
Sep 16 05:41:33 nativespace-cdp sshd[2537862]: Connection closed by 159.100.136.21 port 54424 [preauth]
Sep 16 05:46:33 nativespace-cdp sshd[2539370]: Connection closed by 159.100.136.21 port 34890 [preauth]
Sep 16 05:50:30 nativespace-cdp sshd[2540385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.81.58.11  user=root
Sep 16 05:50:30 nativespace-cdp sshd[2540385]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:50:32 nativespace-cdp sshd[2540385]: Failed password for root from 188.81.58.11 port 42958 ssh2
Sep 16 05:50:33 nativespace-cdp sshd[2540385]: Received disconnect from 188.81.58.11 port 42958:11: Bye Bye [preauth]
Sep 16 05:50:33 nativespace-cdp sshd[2540385]: Disconnected from 188.81.58.11 port 42958 [preauth]
Sep 16 05:51:33 nativespace-cdp sshd[2540705]: Connection closed by 159.100.136.21 port 43294 [preauth]
Sep 16 05:53:30 nativespace-cdp sshd[2541047]: Received disconnect from 146.190.140.18 port 51616:11: Bye Bye [preauth]
Sep 16 05:53:30 nativespace-cdp sshd[2541047]: Disconnected from 146.190.140.18 port 51616 [preauth]
Sep 16 05:54:04 nativespace-cdp sshd[2541209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.157.54  user=root
Sep 16 05:54:04 nativespace-cdp sshd[2541209]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:54:06 nativespace-cdp sshd[2541209]: Failed password for root from 123.30.157.54 port 56188 ssh2
Sep 16 05:54:06 nativespace-cdp sshd[2541209]: Received disconnect from 123.30.157.54 port 56188:11: Bye Bye [preauth]
Sep 16 05:54:06 nativespace-cdp sshd[2541209]: Disconnected from 123.30.157.54 port 56188 [preauth]
Sep 16 05:55:50 nativespace-cdp sshd[2541697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.108.144  user=root
Sep 16 05:55:50 nativespace-cdp sshd[2541697]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:55:52 nativespace-cdp sshd[2541697]: Failed password for root from 47.236.108.144 port 33344 ssh2
Sep 16 05:55:52 nativespace-cdp sshd[2541697]: Received disconnect from 47.236.108.144 port 33344:11: Bye Bye [preauth]
Sep 16 05:55:52 nativespace-cdp sshd[2541697]: Disconnected from 47.236.108.144 port 33344 [preauth]
Sep 16 05:56:33 nativespace-cdp sshd[2541825]: Connection closed by 159.100.136.21 port 52910 [preauth]
Sep 16 05:58:02 nativespace-cdp sshd[2542114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.81.58.11  user=root
Sep 16 05:58:02 nativespace-cdp sshd[2542114]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:58:04 nativespace-cdp sshd[2542114]: Failed password for root from 188.81.58.11 port 34250 ssh2
Sep 16 05:58:04 nativespace-cdp sshd[2542114]: Received disconnect from 188.81.58.11 port 34250:11: Bye Bye [preauth]
Sep 16 05:58:04 nativespace-cdp sshd[2542114]: Disconnected from 188.81.58.11 port 34250 [preauth]
Sep 16 05:58:13 nativespace-cdp sshd[2542139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.108.144  user=root
Sep 16 05:58:13 nativespace-cdp sshd[2542139]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:58:16 nativespace-cdp sshd[2542139]: Failed password for root from 47.236.108.144 port 53648 ssh2
Sep 16 05:58:16 nativespace-cdp sshd[2542139]: Received disconnect from 47.236.108.144 port 53648:11: Bye Bye [preauth]
Sep 16 05:58:16 nativespace-cdp sshd[2542139]: Disconnected from 47.236.108.144 port 53648 [preauth]
Sep 16 05:58:42 nativespace-cdp sshd[2542209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.157.54  user=root
Sep 16 05:58:42 nativespace-cdp sshd[2542209]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:58:43 nativespace-cdp sshd[2542209]: Failed password for root from 123.30.157.54 port 35276 ssh2
Sep 16 05:58:44 nativespace-cdp sshd[2542209]: Received disconnect from 123.30.157.54 port 35276:11: Bye Bye [preauth]
Sep 16 05:58:44 nativespace-cdp sshd[2542209]: Disconnected from 123.30.157.54 port 35276 [preauth]
Sep 16 05:58:46 nativespace-cdp sshd[2542211]: Connection closed by 47.236.108.144 port 60064 [preauth]
Sep 16 05:58:53 nativespace-cdp sshd[2542254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.81.58.11  user=root
Sep 16 05:58:53 nativespace-cdp sshd[2542254]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:58:54 nativespace-cdp sshd[2542254]: Failed password for root from 188.81.58.11 port 48774 ssh2
Sep 16 05:58:55 nativespace-cdp sshd[2542254]: Received disconnect from 188.81.58.11 port 48774:11: Bye Bye [preauth]
Sep 16 05:58:55 nativespace-cdp sshd[2542254]: Disconnected from 188.81.58.11 port 48774 [preauth]
Sep 16 05:58:58 nativespace-cdp sshd[2542318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.108.144  user=root
Sep 16 05:58:58 nativespace-cdp sshd[2542318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:59:00 nativespace-cdp sshd[2542318]: Failed password for root from 47.236.108.144 port 38254 ssh2
Sep 16 05:59:29 nativespace-cdp sshd[2542432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.140.18  user=root
Sep 16 05:59:29 nativespace-cdp sshd[2542432]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:59:30 nativespace-cdp sshd[2542432]: Failed password for root from 146.190.140.18 port 36820 ssh2
Sep 16 05:59:30 nativespace-cdp sshd[2542432]: Received disconnect from 146.190.140.18 port 36820:11: Bye Bye [preauth]
Sep 16 05:59:30 nativespace-cdp sshd[2542432]: Disconnected from 146.190.140.18 port 36820 [preauth]
Sep 16 05:59:32 nativespace-cdp sshd[2542446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.157.54  user=root
Sep 16 05:59:32 nativespace-cdp sshd[2542446]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 05:59:34 nativespace-cdp sshd[2542446]: Failed password for root from 123.30.157.54 port 47918 ssh2
Sep 16 06:00:11 nativespace-cdp sshd[2542857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.140.18  user=root
Sep 16 06:00:11 nativespace-cdp sshd[2542857]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 06:00:12 nativespace-cdp sshd[2542857]: Failed password for root from 146.190.140.18 port 59916 ssh2
Sep 16 06:00:12 nativespace-cdp sshd[2542857]: Received disconnect from 146.190.140.18 port 59916:11: Bye Bye [preauth]
Sep 16 06:00:12 nativespace-cdp sshd[2542857]: Disconnected from 146.190.140.18 port 59916 [preauth]
Sep 16 06:00:50 nativespace-cdp sshd[2542996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.140.18  user=root
Sep 16 06:00:50 nativespace-cdp sshd[2542996]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 06:00:52 nativespace-cdp sshd[2542996]: Failed password for root from 146.190.140.18 port 40920 ssh2
Sep 16 06:00:52 nativespace-cdp sshd[2542996]: Received disconnect from 146.190.140.18 port 40920:11: Bye Bye [preauth]
Sep 16 06:00:52 nativespace-cdp sshd[2542996]: Disconnected from 146.190.140.18 port 40920 [preauth]
Sep 16 06:01:33 nativespace-cdp sshd[2543575]: Connection closed by 159.100.136.21 port 34154 [preauth]
Sep 16 06:06:33 nativespace-cdp sshd[2544706]: Connection closed by 159.100.136.21 port 44050 [preauth]
Sep 16 06:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 06:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:09:56 nativespace-cdp sudo[2545309]: pam_unix(sudo:session): session closed for user root
Sep 16 06:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 06:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:09:56 nativespace-cdp sudo[2545312]: pam_unix(sudo:session): session closed for user root
Sep 16 06:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 06:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:09:59 nativespace-cdp sudo[2545315]: pam_unix(sudo:session): session closed for user root
Sep 16 06:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 06:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:09:59 nativespace-cdp sudo[2545328]: pam_unix(sudo:session): session closed for user root
Sep 16 06:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 06:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:17 nativespace-cdp sudo[2545331]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:18 nativespace-cdp sudo[2545643]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:18 nativespace-cdp sudo[2545646]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:18 nativespace-cdp sudo[2545649]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:18 nativespace-cdp sudo[2545652]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:18 nativespace-cdp sudo[2545655]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 06:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:18 nativespace-cdp sudo[2545658]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 06:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:26 nativespace-cdp sudo[2545688]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 06:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:27 nativespace-cdp sudo[2545695]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=chrisdal user-2=mcdermos user-3=nbhavers user-4=careers user-5=david user-6=tomandle user-7=jennimil user-8=ranxterc user-9=outdoorc user-10=hodgsonmail user-11=branko user-12=romaldki user-13=attlebor user-14=lucy user-15=onlycont user-16=bakery user-17=sosevalu user-18=crrtipdl user-19=nove user-20=boldover user-21=ladburyp user-22=stagingerris user-23=dancinggardener user-24=kategilpin user-25=design user-26=oubpgvbx user-27=tstardom user-28=what user-29=cath user-30=sketchy user-31=havantho user-32=nvihkvu user-33=bwppodcast user-34=zebrapho user-35=steve user-36=asandcoc user-37=sibtoncc user-38=beauty user-39=eatspam user-40=darkstar user-41=dhyana user-42=burydropin user-43=fawcettd user-44=nsceres user-45=isleofwi user-46=smrszyqg user-47=hidden user-48=nomistakes user-49=tigerlet
Sep 16 06:10:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=barbersh user-51=putterfc user-52=nscdp user-53=health2045 user-54=fortunaz user-55=leftie user-56=foods user-57=lkpier user-58=philmcph user-59=ctedorgu user-60=firstre5 user-61=donnychicago user-62=steakbridieme user-63=hirefootballgame user-64=eugincou user-65=courseme user-66=cambria1 user-67=cathski user-68=reliable user-69=ninejimm user-70=howardon user-71=paulmca1 user-72=pugwash user-73=cwsocial user-74=clarkass user-75=firstrel user-76=costestimatorco user-77=firstred user-78=southlon user-79=highlegh user-80=seftvta user-81=jonhartl user-82=ultbcrra user-83=firstres user-84=opaiscyx user-85=coursemc user-86=accooper user-87=ianrayne user-88=connectedshoppin user-89=thqkgnbz user-90=gilpin user-91=milloyco user-92=elecleis user-93=putterfi user-94=hubmaster user-95=carsinyo user-96=fetch user-97=bedfords user-98=belle user-99=ggaaorgu user-100=newstoda user-101=bemadonn user-102=brighto1
Sep 16 06:10:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=nstriton user-104=firstre2 user-105=vivienn1 user-106=battlere user-107=oneoarco user-108=innovat1 user-109=askhform user-110=stuartge user-111=nativene user-112=skyfirec user-113=alexadmin user-114=ulsukarm user-115=booff user-116=markward user-117=foundation user-118=connect9 user-119=athenare user-120=vantagep user-121=maflemin user-122=lbscrmod user-123=still user-124=agproduc user-125=stephani user-126=leereyn1 user-127=jarvisin user-128=spectrum user-129=hodgesonweb user-130=theblack user-131=wilsonsw user-132=musorguk user-133=megacards user-134=brmrjxl user-135=lakesan1 user-136=strathar user-137=sarafoundation user-138=atestord user-139=lbhyisi user-140=hhdugcor user-141=magichat user-142=martsblo user-143=dickemery123 user-144=ptkxhsbt feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 06:10:27 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:29 nativespace-cdp sudo[2545703]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 06:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:31 nativespace-cdp sudo[2545714]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bmV0tetSPklQ8kWX.~
Sep 16 06:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:31 nativespace-cdp sudo[2545717]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bmV0tetSPklQ8kWX.~'
Sep 16 06:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:31 nativespace-cdp sudo[2545720]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bmV0tetSPklQ8kWX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 06:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:31 nativespace-cdp sudo[2545724]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 06:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:31 nativespace-cdp sudo[2545727]: pam_unix(sudo:session): session closed for user root
Sep 16 06:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 06:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 06:10:50 nativespace-cdp sudo[2545783]: pam_unix(sudo:session): session closed for user root
Sep 16 06:11:33 nativespace-cdp sshd[2545934]: Connection closed by 159.100.136.21 port 53310 [preauth]
Sep 16 06:16:37 nativespace-cdp sshd[2547525]: Connection closed by 159.100.136.21 port 34912 [preauth]
Sep 16 06:21:33 nativespace-cdp sshd[2548566]: Connection closed by 159.100.136.21 port 43188 [preauth]
Sep 16 06:26:33 nativespace-cdp sshd[2549645]: Connection closed by 159.100.136.21 port 52842 [preauth]
Sep 16 06:31:34 nativespace-cdp sshd[2551267]: Connection closed by 159.100.136.21 port 33022 [preauth]
Sep 16 06:36:36 nativespace-cdp sshd[2552314]: Connection closed by 159.100.136.21 port 41524 [preauth]
Sep 16 06:41:35 nativespace-cdp sshd[2553440]: Connection closed by 159.100.136.21 port 50254 [preauth]
Sep 16 06:46:36 nativespace-cdp sshd[2554565]: Connection closed by 159.100.136.21 port 58374 [preauth]
Sep 16 06:51:33 nativespace-cdp sshd[2556145]: Connection closed by 159.100.136.21 port 39350 [preauth]
Sep 16 06:56:33 nativespace-cdp sshd[2557265]: Connection closed by 159.100.136.21 port 49060 [preauth]
Sep 16 07:01:33 nativespace-cdp sshd[2558899]: Connection closed by 159.100.136.21 port 58322 [preauth]
Sep 16 07:06:33 nativespace-cdp sshd[2559988]: Connection closed by 159.100.136.21 port 37714 [preauth]
Sep 16 07:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 07:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:38 nativespace-cdp sudo[2560919]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 07:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:38 nativespace-cdp sudo[2560924]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 07:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:42 nativespace-cdp sudo[2560927]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 07:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:42 nativespace-cdp sudo[2560939]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 07:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:51 nativespace-cdp sudo[2560942]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 07:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:52 nativespace-cdp sudo[2560968]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 07:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:52 nativespace-cdp sudo[2560971]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 07:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:52 nativespace-cdp sudo[2560974]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 07:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:52 nativespace-cdp sudo[2560977]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 07:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:52 nativespace-cdp sudo[2560980]: pam_unix(sudo:session): session closed for user root
Sep 16 07:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 07:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:10:52 nativespace-cdp sudo[2560983]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 07:11:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:11 nativespace-cdp sudo[2561090]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 07:11:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:13 nativespace-cdp sudo[2561100]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ultbcrra user-2=seftvta user-3=jonhartl user-4=firstres user-5=coursemc user-6=opaiscyx user-7=clarkass user-8=firstrel user-9=costestimatorco user-10=firstred user-11=highlegh user-12=southlon user-13=milloyco user-14=gilpin user-15=elecleis user-16=putterfi user-17=hubmaster user-18=fetch user-19=carsinyo user-20=accooper user-21=ianrayne user-22=connectedshoppin user-23=thqkgnbz user-24=nstriton user-25=brighto1 user-26=vivienn1 user-27=firstre2 user-28=oneoarco user-29=battlere user-30=bedfords user-31=newstoda user-32=belle user-33=ggaaorgu user-34=bemadonn user-35=alexadmin user-36=skyfirec user-37=innovat1 user-38=stuartge user-39=askhform user-40=nativene user-41=markward user-42=booff user-43=foundation user-44=vantagep user-45=connect9 user-46=athenare user-47=lbscrmod user-48=maflemin
Sep 16 07:11:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ulsukarm user-50=jarvisin user-51=spectrum user-52=theblack user-53=hodgesonweb user-54=agproduc user-55=still user-56=stephani user-57=leereyn1 user-58=brmrjxl user-59=lakesan1 user-60=strathar user-61=atestord user-62=sarafoundation user-63=wilsonsw user-64=megacards user-65=musorguk user-66=martsblo user-67=dickemery123 user-68=ptkxhsbt user-69=hhdugcor user-70=lbhyisi user-71=magichat user-72=tomandle user-73=jennimil user-74=chrisdal user-75=mcdermos user-76=david user-77=nbhavers user-78=careers user-79=lucy user-80=attlebor user-81=onlycont user-82=outdoorc user-83=ranxterc user-84=hodgsonmail user-85=branko user-86=romaldki user-87=nove user-88=boldover user-89=bakery user-90=crrtipdl user-91=sosevalu user-92=tstardom user-93=oubpgvbx user-94=what user-95=havantho user-96=sketchy user-97=cath user-98=nvihkvu user-99=stagingerris user-100=dancinggardener user-101=ladburyp user-102=kategilpin
Sep 16 07:11:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=design user-104=asandcoc user-105=sibtoncc user-106=bwppodcast user-107=zebrapho user-108=steve user-109=fawcettd user-110=burydropin user-111=nsceres user-112=beauty user-113=darkstar user-114=eatspam user-115=dhyana user-116=nscdp user-117=putterfc user-118=leftie user-119=foods user-120=health2045 user-121=fortunaz user-122=lkpier user-123=donnychicago user-124=firstre5 user-125=steakbridieme user-126=philmcph user-127=ctedorgu user-128=isleofwi user-129=smrszyqg user-130=nomistakes user-131=hidden user-132=tigerlet user-133=barbersh user-134=cambria1 user-135=cathski user-136=reliable user-137=ninejimm user-138=cwsocial user-139=paulmca1 user-140=howardon user-141=pugwash user-142=hirefootballgame user-143=eugincou user-144=courseme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 07:11:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 07:11:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:16 nativespace-cdp sudo[2561107]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 07:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:18 nativespace-cdp sudo[2561128]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7Vdx1O7a1BsCSP9A.~
Sep 16 07:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:18 nativespace-cdp sudo[2561133]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7Vdx1O7a1BsCSP9A.~'
Sep 16 07:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:18 nativespace-cdp sudo[2561136]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7Vdx1O7a1BsCSP9A.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 07:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:18 nativespace-cdp sudo[2561140]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 07:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:18 nativespace-cdp sudo[2561143]: pam_unix(sudo:session): session closed for user root
Sep 16 07:11:34 nativespace-cdp sshd[2561182]: Connection closed by 159.100.136.21 port 46680 [preauth]
Sep 16 07:11:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 07:11:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 07:11:50 nativespace-cdp sudo[2561243]: pam_unix(sudo:session): session closed for user root
Sep 16 07:16:36 nativespace-cdp sshd[2562589]: Connection closed by 159.100.136.21 port 56000 [preauth]
Sep 16 07:21:33 nativespace-cdp sshd[2563912]: Connection closed by 159.100.136.21 port 36380 [preauth]
Sep 16 07:26:33 nativespace-cdp sshd[2564952]: Connection closed by 159.100.136.21 port 45274 [preauth]
Sep 16 07:31:36 nativespace-cdp sshd[2566558]: Connection closed by 159.100.136.21 port 53786 [preauth]
Sep 16 07:36:34 nativespace-cdp sshd[2567656]: Connection closed by 159.100.136.21 port 34896 [preauth]
Sep 16 07:41:35 nativespace-cdp sshd[2569060]: Connection closed by 159.100.136.21 port 42936 [preauth]
Sep 16 07:46:34 nativespace-cdp sshd[2570375]: Connection closed by 159.100.136.21 port 52622 [preauth]
Sep 16 07:51:06 nativespace-cdp sshd[2571819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.103.237.35  user=root
Sep 16 07:51:06 nativespace-cdp sshd[2571819]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 07:51:08 nativespace-cdp sshd[2571819]: Failed password for root from 59.103.237.35 port 53067 ssh2
Sep 16 07:51:08 nativespace-cdp sshd[2571819]: Received disconnect from 59.103.237.35 port 53067:11: Bye Bye [preauth]
Sep 16 07:51:08 nativespace-cdp sshd[2571819]: Disconnected from 59.103.237.35 port 53067 [preauth]
Sep 16 07:51:33 nativespace-cdp sshd[2571978]: Connection closed by 159.100.136.21 port 60446 [preauth]
Sep 16 07:55:55 nativespace-cdp sshd[2573095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.103.237.35  user=root
Sep 16 07:55:55 nativespace-cdp sshd[2573095]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 07:55:58 nativespace-cdp sshd[2573095]: Failed password for root from 59.103.237.35 port 33124 ssh2
Sep 16 07:56:00 nativespace-cdp sshd[2573095]: Received disconnect from 59.103.237.35 port 33124:11: Bye Bye [preauth]
Sep 16 07:56:00 nativespace-cdp sshd[2573095]: Disconnected from 59.103.237.35 port 33124 [preauth]
Sep 16 07:56:33 nativespace-cdp sshd[2573325]: Connection closed by 159.100.136.21 port 41134 [preauth]
Sep 16 07:57:10 nativespace-cdp sshd[2573426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.103.237.35  user=root
Sep 16 07:57:10 nativespace-cdp sshd[2573426]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 07:57:12 nativespace-cdp sshd[2573426]: Failed password for root from 59.103.237.35 port 59307 ssh2
Sep 16 07:57:12 nativespace-cdp sshd[2573426]: Received disconnect from 59.103.237.35 port 59307:11: Bye Bye [preauth]
Sep 16 07:57:12 nativespace-cdp sshd[2573426]: Disconnected from 59.103.237.35 port 59307 [preauth]
Sep 16 08:01:34 nativespace-cdp sshd[2574763]: Connection closed by 159.100.136.21 port 50440 [preauth]
Sep 16 08:06:33 nativespace-cdp sshd[2576502]: Connection closed by 159.100.136.21 port 59054 [preauth]
Sep 16 08:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 08:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:10 nativespace-cdp sudo[2577442]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 08:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:10 nativespace-cdp sudo[2577446]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 08:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:12 nativespace-cdp sudo[2577449]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 08:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:13 nativespace-cdp sudo[2577459]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 08:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577462]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 08:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577486]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 08:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577489]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 08:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577492]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 08:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577495]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 08:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577498]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 08:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:19 nativespace-cdp sudo[2577501]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 08:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:21 nativespace-cdp sudo[2577513]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 08:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:22 nativespace-cdp sudo[2577518]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=booff user-3=foundation user-4=markward user-5=athenare user-6=connect9 user-7=vantagep user-8=maflemin user-9=lbscrmod user-10=still user-11=agproduc user-12=stephani user-13=leereyn1 user-14=jarvisin user-15=spectrum user-16=theblack user-17=hodgesonweb user-18=wilsonsw user-19=musorguk user-20=megacards user-21=lakesan1 user-22=brmrjxl user-23=strathar user-24=sarafoundation user-25=atestord user-26=lbhyisi user-27=hhdugcor user-28=magichat user-29=martsblo user-30=dickemery123 user-31=ptkxhsbt user-32=firstrel user-33=clarkass user-34=costestimatorco user-35=firstred user-36=southlon user-37=highlegh user-38=jonhartl user-39=seftvta user-40=ultbcrra user-41=firstres user-42=coursemc user-43=opaiscyx user-44=accooper user-45=ianrayne user-46=connectedshoppin user-47=thqkgnbz
Sep 16 08:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=milloyco user-49=gilpin user-50=elecleis user-51=putterfi user-52=hubmaster user-53=carsinyo user-54=fetch user-55=bedfords user-56=ggaaorgu user-57=belle user-58=newstoda user-59=bemadonn user-60=brighto1 user-61=nstriton user-62=firstre2 user-63=vivienn1 user-64=battlere user-65=oneoarco user-66=innovat1 user-67=askhform user-68=stuartge user-69=nativene user-70=alexadmin user-71=skyfirec user-72=bwppodcast user-73=zebrapho user-74=steve user-75=sibtoncc user-76=asandcoc user-77=beauty user-78=eatspam user-79=darkstar user-80=dhyana user-81=burydropin user-82=fawcettd user-83=nsceres user-84=smrszyqg user-85=isleofwi user-86=hidden user-87=nomistakes user-88=tigerlet user-89=barbersh user-90=putterfc user-91=nscdp user-92=health2045 user-93=fortunaz user-94=leftie user-95=foods user-96=lkpier user-97=ctedorgu user-98=philmcph user-99=steakbridieme user-100=firstre5 user-101=donnychicago
Sep 16 08:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=eugincou user-104=courseme user-105=cathski user-106=cambria1 user-107=ninejimm user-108=reliable user-109=howardon user-110=paulmca1 user-111=pugwash user-112=cwsocial user-113=chrisdal user-114=mcdermos user-115=careers user-116=nbhavers user-117=david user-118=tomandle user-119=jennimil user-120=ranxterc user-121=hodgsonmail user-122=outdoorc user-123=branko user-124=romaldki user-125=attlebor user-126=lucy user-127=onlycont user-128=bakery user-129=sosevalu user-130=crrtipdl user-131=nove user-132=boldover user-133=ladburyp user-134=dancinggardener user-135=stagingerris user-136=kategilpin user-137=design user-138=oubpgvbx user-139=tstardom user-140=what user-141=cath user-142=sketchy user-143=havantho user-144=nvihkvu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 08:10:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 08:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:23 nativespace-cdp sudo[2577523]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 08:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:23 nativespace-cdp sudo[2577531]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4OyB4KzDXuyZZZ98.~
Sep 16 08:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:24 nativespace-cdp sudo[2577534]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4OyB4KzDXuyZZZ98.~'
Sep 16 08:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:24 nativespace-cdp sudo[2577537]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4OyB4KzDXuyZZZ98.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 08:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:24 nativespace-cdp sudo[2577541]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 08:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:24 nativespace-cdp sudo[2577544]: pam_unix(sudo:session): session closed for user root
Sep 16 08:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 08:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 08:10:46 nativespace-cdp sudo[2577607]: pam_unix(sudo:session): session closed for user root
Sep 16 08:11:33 nativespace-cdp sshd[2577959]: Connection closed by 159.100.136.21 port 39504 [preauth]
Sep 16 08:16:33 nativespace-cdp sshd[2579762]: Connection closed by 159.100.136.21 port 47756 [preauth]
Sep 16 08:21:33 nativespace-cdp sshd[2580944]: Connection closed by 159.100.136.21 port 56578 [preauth]
Sep 16 08:26:33 nativespace-cdp sshd[2582046]: Connection closed by 159.100.136.21 port 36916 [preauth]
Sep 16 08:31:33 nativespace-cdp sshd[2583284]: Connection closed by 159.100.136.21 port 46120 [preauth]
Sep 16 08:36:36 nativespace-cdp sshd[2584924]: Connection closed by 159.100.136.21 port 55076 [preauth]
Sep 16 08:41:33 nativespace-cdp sshd[2586136]: Connection closed by 159.100.136.21 port 35232 [preauth]
Sep 16 08:46:34 nativespace-cdp sshd[2588020]: Connection closed by 159.100.136.21 port 43480 [preauth]
Sep 16 08:51:33 nativespace-cdp sshd[2589250]: Connection closed by 159.100.136.21 port 52610 [preauth]
Sep 16 08:55:29 nativespace-cdp sshd[2590151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.66.235  user=root
Sep 16 08:55:29 nativespace-cdp sshd[2590151]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:55:32 nativespace-cdp sshd[2590151]: Failed password for root from 161.35.66.235 port 58596 ssh2
Sep 16 08:55:32 nativespace-cdp sshd[2590151]: Received disconnect from 161.35.66.235 port 58596:11: Bye Bye [preauth]
Sep 16 08:55:32 nativespace-cdp sshd[2590151]: Disconnected from 161.35.66.235 port 58596 [preauth]
Sep 16 08:55:41 nativespace-cdp sshd[2590235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.253.20  user=root
Sep 16 08:55:41 nativespace-cdp sshd[2590235]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:55:43 nativespace-cdp sshd[2590235]: Failed password for root from 104.236.253.20 port 41602 ssh2
Sep 16 08:55:43 nativespace-cdp sshd[2590235]: Received disconnect from 104.236.253.20 port 41602:11: Bye Bye [preauth]
Sep 16 08:55:43 nativespace-cdp sshd[2590235]: Disconnected from 104.236.253.20 port 41602 [preauth]
Sep 16 08:56:10 nativespace-cdp sshd[2590404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.181  user=root
Sep 16 08:56:10 nativespace-cdp sshd[2590404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:56:12 nativespace-cdp sshd[2590404]: Failed password for root from 23.158.56.181 port 43336 ssh2
Sep 16 08:56:12 nativespace-cdp sshd[2590408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.108.100.117  user=root
Sep 16 08:56:12 nativespace-cdp sshd[2590408]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:56:12 nativespace-cdp sshd[2590404]: Received disconnect from 23.158.56.181 port 43336:11: Bye Bye [preauth]
Sep 16 08:56:12 nativespace-cdp sshd[2590404]: Disconnected from 23.158.56.181 port 43336 [preauth]
Sep 16 08:56:13 nativespace-cdp sshd[2590408]: Failed password for root from 222.108.100.117 port 36342 ssh2
Sep 16 08:56:13 nativespace-cdp sshd[2590408]: Received disconnect from 222.108.100.117 port 36342:11: Bye Bye [preauth]
Sep 16 08:56:13 nativespace-cdp sshd[2590408]: Disconnected from 222.108.100.117 port 36342 [preauth]
Sep 16 08:56:36 nativespace-cdp sshd[2590472]: Connection closed by 159.100.136.21 port 33198 [preauth]
Sep 16 08:56:40 nativespace-cdp sshd[2590483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.13.39  user=root
Sep 16 08:56:40 nativespace-cdp sshd[2590483]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:56:42 nativespace-cdp sshd[2590483]: Failed password for root from 52.161.13.39 port 53760 ssh2
Sep 16 08:56:45 nativespace-cdp sshd[2590483]: Received disconnect from 52.161.13.39 port 53760:11: Bye Bye [preauth]
Sep 16 08:56:45 nativespace-cdp sshd[2590483]: Disconnected from 52.161.13.39 port 53760 [preauth]
Sep 16 08:57:19 nativespace-cdp sshd[2590604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.138.101  user=root
Sep 16 08:57:19 nativespace-cdp sshd[2590604]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:57:21 nativespace-cdp sshd[2590604]: Failed password for root from 67.205.138.101 port 41602 ssh2
Sep 16 08:57:23 nativespace-cdp sshd[2590604]: Received disconnect from 67.205.138.101 port 41602:11: Bye Bye [preauth]
Sep 16 08:57:23 nativespace-cdp sshd[2590604]: Disconnected from 67.205.138.101 port 41602 [preauth]
Sep 16 08:57:51 nativespace-cdp sshd[2590761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.112.192  user=root
Sep 16 08:57:51 nativespace-cdp sshd[2590761]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 08:57:53 nativespace-cdp sshd[2590761]: Failed password for root from 103.172.112.192 port 51060 ssh2
Sep 16 08:57:53 nativespace-cdp sshd[2590761]: Received disconnect from 103.172.112.192 port 51060:11: Bye Bye [preauth]
Sep 16 08:57:53 nativespace-cdp sshd[2590761]: Disconnected from 103.172.112.192 port 51060 [preauth]
Sep 16 09:01:36 nativespace-cdp sshd[2592309]: Connection closed by 159.100.136.21 port 42000 [preauth]
Sep 16 09:01:37 nativespace-cdp sshd[2592312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.108.31  user=root
Sep 16 09:01:37 nativespace-cdp sshd[2592312]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:01:39 nativespace-cdp sshd[2592312]: Failed password for root from 68.183.108.31 port 39074 ssh2
Sep 16 09:01:39 nativespace-cdp sshd[2592312]: Received disconnect from 68.183.108.31 port 39074:11: Bye Bye [preauth]
Sep 16 09:01:39 nativespace-cdp sshd[2592312]: Disconnected from 68.183.108.31 port 39074 [preauth]
Sep 16 09:01:39 nativespace-cdp sshd[2592318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.253.20  user=root
Sep 16 09:01:39 nativespace-cdp sshd[2592318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:01:41 nativespace-cdp sshd[2592318]: Failed password for root from 104.236.253.20 port 33330 ssh2
Sep 16 09:01:41 nativespace-cdp sshd[2592318]: Received disconnect from 104.236.253.20 port 33330:11: Bye Bye [preauth]
Sep 16 09:01:41 nativespace-cdp sshd[2592318]: Disconnected from 104.236.253.20 port 33330 [preauth]
Sep 16 09:01:58 nativespace-cdp sshd[2592375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.66.235  user=root
Sep 16 09:01:58 nativespace-cdp sshd[2592375]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:02:00 nativespace-cdp sshd[2592375]: Failed password for root from 161.35.66.235 port 59100 ssh2
Sep 16 09:02:00 nativespace-cdp sshd[2592375]: Received disconnect from 161.35.66.235 port 59100:11: Bye Bye [preauth]
Sep 16 09:02:00 nativespace-cdp sshd[2592375]: Disconnected from 161.35.66.235 port 59100 [preauth]
Sep 16 09:02:22 nativespace-cdp sshd[2592469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.253.20  user=root
Sep 16 09:02:22 nativespace-cdp sshd[2592469]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:02:24 nativespace-cdp sshd[2592469]: Failed password for root from 104.236.253.20 port 48564 ssh2
Sep 16 09:02:24 nativespace-cdp sshd[2592469]: Received disconnect from 104.236.253.20 port 48564:11: Bye Bye [preauth]
Sep 16 09:02:24 nativespace-cdp sshd[2592469]: Disconnected from 104.236.253.20 port 48564 [preauth]
Sep 16 09:02:25 nativespace-cdp sshd[2592540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.138.101  user=root
Sep 16 09:02:25 nativespace-cdp sshd[2592540]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:02:27 nativespace-cdp sshd[2592540]: Failed password for root from 67.205.138.101 port 36148 ssh2
Sep 16 09:02:27 nativespace-cdp sshd[2592540]: Received disconnect from 67.205.138.101 port 36148:11: Bye Bye [preauth]
Sep 16 09:02:27 nativespace-cdp sshd[2592540]: Disconnected from 67.205.138.101 port 36148 [preauth]
Sep 16 09:02:27 nativespace-cdp sshd[2592554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.108.100.117  user=root
Sep 16 09:02:27 nativespace-cdp sshd[2592554]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:02:29 nativespace-cdp sshd[2592554]: Failed password for root from 222.108.100.117 port 32944 ssh2
Sep 16 09:02:29 nativespace-cdp sshd[2592554]: Received disconnect from 222.108.100.117 port 32944:11: Bye Bye [preauth]
Sep 16 09:02:29 nativespace-cdp sshd[2592554]: Disconnected from 222.108.100.117 port 32944 [preauth]
Sep 16 09:02:30 nativespace-cdp sshd[2592580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.112.192  user=root
Sep 16 09:02:30 nativespace-cdp sshd[2592580]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:02:32 nativespace-cdp sshd[2592580]: Failed password for root from 103.172.112.192 port 54192 ssh2
Sep 16 09:02:33 nativespace-cdp sshd[2592580]: Received disconnect from 103.172.112.192 port 54192:11: Bye Bye [preauth]
Sep 16 09:02:33 nativespace-cdp sshd[2592580]: Disconnected from 103.172.112.192 port 54192 [preauth]
Sep 16 09:02:40 nativespace-cdp sshd[2592609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.13.39  user=root
Sep 16 09:02:40 nativespace-cdp sshd[2592609]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:02:42 nativespace-cdp sshd[2592609]: Failed password for root from 52.161.13.39 port 41014 ssh2
Sep 16 09:02:42 nativespace-cdp sshd[2592609]: Received disconnect from 52.161.13.39 port 41014:11: Bye Bye [preauth]
Sep 16 09:02:42 nativespace-cdp sshd[2592609]: Disconnected from 52.161.13.39 port 41014 [preauth]
Sep 16 09:03:15 nativespace-cdp sshd[2592743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.138.101  user=root
Sep 16 09:03:15 nativespace-cdp sshd[2592743]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:03:17 nativespace-cdp sshd[2592743]: Failed password for root from 67.205.138.101 port 45020 ssh2
Sep 16 09:03:17 nativespace-cdp sshd[2592768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.108.100.117  user=root
Sep 16 09:03:17 nativespace-cdp sshd[2592768]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:03:19 nativespace-cdp sshd[2592768]: Failed password for root from 222.108.100.117 port 34012 ssh2
Sep 16 09:03:19 nativespace-cdp sshd[2592787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.13.39  user=root
Sep 16 09:03:19 nativespace-cdp sshd[2592787]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:03:19 nativespace-cdp sshd[2592768]: Received disconnect from 222.108.100.117 port 34012:11: Bye Bye [preauth]
Sep 16 09:03:19 nativespace-cdp sshd[2592768]: Disconnected from 222.108.100.117 port 34012 [preauth]
Sep 16 09:03:21 nativespace-cdp sshd[2592787]: Failed password for root from 52.161.13.39 port 43330 ssh2
Sep 16 09:03:21 nativespace-cdp sshd[2592787]: Received disconnect from 52.161.13.39 port 43330:11: Bye Bye [preauth]
Sep 16 09:03:21 nativespace-cdp sshd[2592787]: Disconnected from 52.161.13.39 port 43330 [preauth]
Sep 16 09:03:29 nativespace-cdp sshd[2592852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.112.192  user=root
Sep 16 09:03:29 nativespace-cdp sshd[2592852]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:03:31 nativespace-cdp sshd[2592852]: Failed password for root from 103.172.112.192 port 59496 ssh2
Sep 16 09:03:31 nativespace-cdp sshd[2592852]: Received disconnect from 103.172.112.192 port 59496:11: Bye Bye [preauth]
Sep 16 09:03:31 nativespace-cdp sshd[2592852]: Disconnected from 103.172.112.192 port 59496 [preauth]
Sep 16 09:03:52 nativespace-cdp sshd[2592930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.181  user=root
Sep 16 09:03:52 nativespace-cdp sshd[2592930]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:03:55 nativespace-cdp sshd[2592930]: Failed password for root from 23.158.56.181 port 41756 ssh2
Sep 16 09:03:55 nativespace-cdp sshd[2592930]: Received disconnect from 23.158.56.181 port 41756:11: Bye Bye [preauth]
Sep 16 09:03:55 nativespace-cdp sshd[2592930]: Disconnected from 23.158.56.181 port 41756 [preauth]
Sep 16 09:04:14 nativespace-cdp sshd[2593102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.66.235  user=root
Sep 16 09:04:14 nativespace-cdp sshd[2593102]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:04:15 nativespace-cdp sshd[2593102]: Failed password for root from 161.35.66.235 port 52624 ssh2
Sep 16 09:04:15 nativespace-cdp sshd[2593102]: Received disconnect from 161.35.66.235 port 52624:11: Bye Bye [preauth]
Sep 16 09:04:15 nativespace-cdp sshd[2593102]: Disconnected from 161.35.66.235 port 52624 [preauth]
Sep 16 09:04:27 nativespace-cdp sshd[2593166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.181  user=root
Sep 16 09:04:27 nativespace-cdp sshd[2593166]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:04:29 nativespace-cdp sshd[2593166]: Failed password for root from 23.158.56.181 port 54792 ssh2
Sep 16 09:04:33 nativespace-cdp sshd[2593166]: Received disconnect from 23.158.56.181 port 54792:11: Bye Bye [preauth]
Sep 16 09:04:33 nativespace-cdp sshd[2593166]: Disconnected from 23.158.56.181 port 54792 [preauth]
Sep 16 09:04:36 nativespace-cdp sshd[2593200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.108.31  user=root
Sep 16 09:04:36 nativespace-cdp sshd[2593200]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:04:39 nativespace-cdp sshd[2593200]: Failed password for root from 68.183.108.31 port 37888 ssh2
Sep 16 09:04:48 nativespace-cdp sshd[2593200]: Received disconnect from 68.183.108.31 port 37888:11: Bye Bye [preauth]
Sep 16 09:04:48 nativespace-cdp sshd[2593200]: Disconnected from 68.183.108.31 port 37888 [preauth]
Sep 16 09:05:25 nativespace-cdp sshd[2593554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.108.31  user=root
Sep 16 09:05:25 nativespace-cdp sshd[2593554]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 09:05:27 nativespace-cdp sshd[2593554]: Failed password for root from 68.183.108.31 port 50846 ssh2
Sep 16 09:06:34 nativespace-cdp sshd[2593890]: Connection closed by 159.100.136.21 port 50168 [preauth]
Sep 16 09:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 09:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:03 nativespace-cdp sudo[2594856]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 09:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:03 nativespace-cdp sudo[2594868]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 09:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:07 nativespace-cdp sudo[2594872]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 09:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:07 nativespace-cdp sudo[2594974]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 09:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595026]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 09:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595055]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 09:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595060]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 09:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595064]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 09:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595069]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 09:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595075]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 09:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:14 nativespace-cdp sudo[2595081]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 09:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:19 nativespace-cdp sudo[2595113]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 09:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:21 nativespace-cdp sudo[2595120]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=mcdermos user-2=chrisdal user-3=careers user-4=nbhavers user-5=david user-6=tomandle user-7=jennimil user-8=branko user-9=ranxterc user-10=outdoorc user-11=hodgsonmail user-12=romaldki user-13=attlebor user-14=lucy user-15=onlycont user-16=sosevalu user-17=crrtipdl user-18=bakery user-19=nove user-20=boldover user-21=kategilpin user-22=ladburyp user-23=dancinggardener user-24=stagingerris user-25=design user-26=what user-27=oubpgvbx user-28=tstardom user-29=nvihkvu user-30=cath user-31=sketchy user-32=havantho user-33=zebrapho user-34=bwppodcast user-35=steve user-36=sibtoncc user-37=asandcoc user-38=eatspam user-39=darkstar user-40=beauty user-41=dhyana user-42=burydropin user-43=fawcettd user-44=nsceres user-45=isleofwi user-46=smrszyqg user-47=tigerlet user-48=barbersh user-49=hidden
Sep 16 09:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=nomistakes user-51=fortunaz user-52=health2045 user-53=leftie user-54=foods user-55=putterfc user-56=nscdp user-57=ctedorgu user-58=philmcph user-59=firstre5 user-60=steakbridieme user-61=donnychicago user-62=lkpier user-63=hirefootballgame user-64=courseme user-65=eugincou user-66=reliable user-67=ninejimm user-68=cambria1 user-69=cathski user-70=howardon user-71=paulmca1 user-72=pugwash user-73=cwsocial user-74=costestimatorco user-75=firstrel user-76=clarkass user-77=southlon user-78=highlegh user-79=firstred user-80=firstres user-81=seftvta user-82=jonhartl user-83=ultbcrra user-84=coursemc user-85=opaiscyx user-86=ianrayne user-87=accooper user-88=thqkgnbz user-89=connectedshoppin user-90=elecleis user-91=milloyco user-92=gilpin user-93=carsinyo user-94=fetch user-95=putterfi user-96=hubmaster user-97=bedfords user-98=bemadonn user-99=belle user-100=ggaaorgu user-101=newstoda user-102=brighto1
Sep 16 09:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=nstriton user-104=battlere user-105=oneoarco user-106=firstre2 user-107=vivienn1 user-108=stuartge user-109=askhform user-110=innovat1 user-111=nativene user-112=alexadmin user-113=skyfirec user-114=ulsukarm user-115=booff user-116=markward user-117=foundation user-118=maflemin user-119=lbscrmod user-120=athenare user-121=connect9 user-122=vantagep user-123=still user-124=agproduc user-125=leereyn1 user-126=stephani user-127=jarvisin user-128=hodgesonweb user-129=theblack user-130=spectrum user-131=wilsonsw user-132=musorguk user-133=megacards user-134=brmrjxl user-135=lakesan1 user-136=sarafoundation user-137=atestord user-138=strathar user-139=lbhyisi user-140=hhdugcor user-141=magichat user-142=martsblo user-143=ptkxhsbt user-144=dickemery123 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 09:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 09:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:23 nativespace-cdp sudo[2595140]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:23 nativespace-cdp sudo[2595150]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-1rvKZr0l5gW5tvqu.~
Sep 16 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:23 nativespace-cdp sudo[2595155]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-1rvKZr0l5gW5tvqu.~'
Sep 16 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:23 nativespace-cdp sudo[2595160]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-1rvKZr0l5gW5tvqu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:23 nativespace-cdp sudo[2595166]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:23 nativespace-cdp sudo[2595171]: pam_unix(sudo:session): session closed for user root
Sep 16 09:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 09:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 09:10:36 nativespace-cdp sudo[2595215]: pam_unix(sudo:session): session closed for user root
Sep 16 09:11:33 nativespace-cdp sshd[2595507]: Connection closed by 159.100.136.21 port 57662 [preauth]
Sep 16 09:16:33 nativespace-cdp sshd[2597059]: Connection closed by 159.100.136.21 port 38400 [preauth]
Sep 16 09:21:33 nativespace-cdp sshd[2598586]: Connection closed by 159.100.136.21 port 47082 [preauth]
Sep 16 09:26:36 nativespace-cdp sshd[2599804]: Connection closed by 159.100.136.21 port 56438 [preauth]
Sep 16 09:31:33 nativespace-cdp sshd[2601090]: Connection closed by 159.100.136.21 port 36660 [preauth]
Sep 16 09:36:33 nativespace-cdp sshd[2602589]: Connection closed by 159.100.136.21 port 46408 [preauth]
Sep 16 09:41:35 nativespace-cdp sshd[2603903]: Connection closed by 159.100.136.21 port 55176 [preauth]
Sep 16 09:46:33 nativespace-cdp sshd[2605487]: Connection closed by 159.100.136.21 port 36464 [preauth]
Sep 16 09:51:33 nativespace-cdp sshd[2606772]: Connection closed by 159.100.136.21 port 45848 [preauth]
Sep 16 09:56:33 nativespace-cdp sshd[2607890]: Connection closed by 159.100.136.21 port 55186 [preauth]
Sep 16 10:01:33 nativespace-cdp sshd[2609219]: Connection closed by 159.100.136.21 port 35436 [preauth]
Sep 16 10:06:34 nativespace-cdp sshd[2610629]: Connection closed by 159.100.136.21 port 43148 [preauth]
Sep 16 10:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 10:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:05 nativespace-cdp sudo[2611933]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 10:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:05 nativespace-cdp sudo[2611936]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 10:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:07 nativespace-cdp sudo[2611939]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 10:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:07 nativespace-cdp sudo[2611948]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 10:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611951]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 10:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611976]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 10:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611979]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 10:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611982]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 10:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611985]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 10:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611988]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 10:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:12 nativespace-cdp sudo[2611991]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 10:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:20 nativespace-cdp sudo[2612021]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 10:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:21 nativespace-cdp sudo[2612029]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=musorguk user-3=megacards user-4=lakesan1 user-5=brmrjxl user-6=sarafoundation user-7=atestord user-8=strathar user-9=lbhyisi user-10=hhdugcor user-11=magichat user-12=martsblo user-13=ptkxhsbt user-14=dickemery123 user-15=ulsukarm user-16=booff user-17=foundation user-18=markward user-19=maflemin user-20=lbscrmod user-21=connect9 user-22=athenare user-23=vantagep user-24=still user-25=agproduc user-26=leereyn1 user-27=stephani user-28=jarvisin user-29=hodgesonweb user-30=theblack user-31=spectrum user-32=bedfords user-33=bemadonn user-34=belle user-35=ggaaorgu user-36=newstoda user-37=brighto1 user-38=nstriton user-39=battlere user-40=oneoarco user-41=firstre2 user-42=vivienn1 user-43=stuartge user-44=askhform user-45=innovat1 user-46=nativene user-47=skyfirec user-48=alexadmin
Sep 16 10:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=costestimatorco user-50=clarkass user-51=firstrel user-52=southlon user-53=highlegh user-54=firstred user-55=firstres user-56=seftvta user-57=jonhartl user-58=ultbcrra user-59=opaiscyx user-60=coursemc user-61=ianrayne user-62=accooper user-63=thqkgnbz user-64=connectedshoppin user-65=elecleis user-66=gilpin user-67=milloyco user-68=carsinyo user-69=fetch user-70=putterfi user-71=hubmaster user-72=isleofwi user-73=smrszyqg user-74=tigerlet user-75=barbersh user-76=hidden user-77=nomistakes user-78=health2045 user-79=fortunaz user-80=foods user-81=leftie user-82=putterfc user-83=nscdp user-84=philmcph user-85=ctedorgu user-86=firstre5 user-87=steakbridieme user-88=donnychicago user-89=lkpier user-90=hirefootballgame user-91=courseme user-92=eugincou user-93=ninejimm user-94=reliable user-95=cambria1 user-96=cathski user-97=howardon user-98=paulmca1 user-99=pugwash user-100=cwsocial user-101=zebrapho
Sep 16 10:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=steve user-104=asandcoc user-105=sibtoncc user-106=eatspam user-107=darkstar user-108=beauty user-109=dhyana user-110=burydropin user-111=fawcettd user-112=nsceres user-113=sosevalu user-114=crrtipdl user-115=bakery user-116=nove user-117=boldover user-118=kategilpin user-119=ladburyp user-120=dancinggardener user-121=stagingerris user-122=design user-123=what user-124=oubpgvbx user-125=tstardom user-126=nvihkvu user-127=cath user-128=sketchy user-129=havantho user-130=mcdermos user-131=chrisdal user-132=nbhavers user-133=careers user-134=david user-135=tomandle user-136=jennimil user-137=branko user-138=hodgsonmail user-139=outdoorc user-140=ranxterc user-141=romaldki user-142=attlebor user-143=lucy user-144=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 10:10:21 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 10:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:23 nativespace-cdp sudo[2612086]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 10:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:23 nativespace-cdp sudo[2612096]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-p2x2l2fXdjr7P674.~
Sep 16 10:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:23 nativespace-cdp sudo[2612102]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-p2x2l2fXdjr7P674.~'
Sep 16 10:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:23 nativespace-cdp sudo[2612106]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-p2x2l2fXdjr7P674.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 10:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:24 nativespace-cdp sudo[2612112]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 10:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:24 nativespace-cdp sudo[2612117]: pam_unix(sudo:session): session closed for user root
Sep 16 10:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 10:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 10:10:31 nativespace-cdp sudo[2612167]: pam_unix(sudo:session): session closed for user root
Sep 16 10:11:35 nativespace-cdp sshd[2612544]: Connection closed by 159.100.136.21 port 51664 [preauth]
Sep 16 10:16:33 nativespace-cdp sshd[2614202]: Connection closed by 159.100.136.21 port 60636 [preauth]
Sep 16 10:21:33 nativespace-cdp sshd[2615614]: Connection closed by 159.100.136.21 port 41090 [preauth]
Sep 16 10:26:33 nativespace-cdp sshd[2616832]: Connection closed by 159.100.136.21 port 50880 [preauth]
Sep 16 10:31:35 nativespace-cdp sshd[2619057]: Connection closed by 159.100.136.21 port 58722 [preauth]
Sep 16 10:36:33 nativespace-cdp sshd[2620306]: Connection closed by 159.100.136.21 port 39578 [preauth]
Sep 16 10:41:33 nativespace-cdp sshd[2621526]: Connection closed by 159.100.136.21 port 48888 [preauth]
Sep 16 10:46:36 nativespace-cdp sshd[2622844]: Connection closed by 159.100.136.21 port 58712 [preauth]
Sep 16 10:51:36 nativespace-cdp sshd[2624357]: Connection closed by 159.100.136.21 port 39022 [preauth]
Sep 16 10:56:13 nativespace-cdp sshd[2625791]: Bad protocol version identification '\026\003\001' from 199.45.155.105 port 43336
Sep 16 10:56:16 nativespace-cdp sshd[2625801]: Did not receive identification string from 199.45.155.105 port 43384
Sep 16 10:56:33 nativespace-cdp sshd[2625861]: Connection closed by 159.100.136.21 port 47848 [preauth]
Sep 16 10:56:39 nativespace-cdp sshd[2625830]: Connection closed by 199.45.155.105 port 60622 [preauth]
Sep 16 11:01:33 nativespace-cdp sshd[2627619]: Connection closed by 159.100.136.21 port 57304 [preauth]
Sep 16 11:06:33 nativespace-cdp sshd[2628988]: Connection closed by 159.100.136.21 port 38138 [preauth]
Sep 16 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:02 nativespace-cdp sudo[2629849]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:02 nativespace-cdp sudo[2629918]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:05 nativespace-cdp sudo[2629922]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 11:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:05 nativespace-cdp sudo[2629959]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 11:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2629962]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2629992]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2629995]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2629998]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2630002]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2630005]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:11 nativespace-cdp sudo[2630008]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:29 nativespace-cdp sudo[2630071]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:30 nativespace-cdp sudo[2630078]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=opaiscyx user-2=coursemc user-3=firstres user-4=jonhartl user-5=seftvta user-6=ultbcrra user-7=southlon user-8=highlegh user-9=firstred user-10=costestimatorco user-11=firstrel user-12=clarkass user-13=carsinyo user-14=fetch user-15=putterfi user-16=hubmaster user-17=elecleis user-18=milloyco user-19=gilpin user-20=thqkgnbz user-21=connectedshoppin user-22=ianrayne user-23=accooper user-24=battlere user-25=oneoarco user-26=firstre2 user-27=vivienn1 user-28=brighto1 user-29=nstriton user-30=bemadonn user-31=ggaaorgu user-32=belle user-33=newstoda user-34=bedfords user-35=alexadmin user-36=skyfirec user-37=nativene user-38=askhform user-39=stuartge user-40=innovat1 user-41=maflemin user-42=lbscrmod user-43=connect9 user-44=athenare user-45=vantagep user-46=booff user-47=foundation user-48=markward
Sep 16 11:10:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ulsukarm user-50=theblack user-51=hodgesonweb user-52=spectrum user-53=jarvisin user-54=leereyn1 user-55=stephani user-56=still user-57=agproduc user-58=sarafoundation user-59=atestord user-60=strathar user-61=lakesan1 user-62=brmrjxl user-63=musorguk user-64=megacards user-65=wilsonsw user-66=ptkxhsbt user-67=dickemery123 user-68=martsblo user-69=magichat user-70=lbhyisi user-71=hhdugcor user-72=jennimil user-73=tomandle user-74=nbhavers user-75=careers user-76=david user-77=mcdermos user-78=chrisdal user-79=onlycont user-80=attlebor user-81=lucy user-82=romaldki user-83=branko user-84=ranxterc user-85=outdoorc user-86=hodgsonmail user-87=boldover user-88=nove user-89=sosevalu user-90=crrtipdl user-91=bakery user-92=nvihkvu user-93=sketchy user-94=cath user-95=havantho user-96=what user-97=oubpgvbx user-98=tstardom user-99=design user-100=kategilpin user-101=ladburyp user-102=dancinggardener
Sep 16 11:10:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=stagingerris user-104=sibtoncc user-105=asandcoc user-106=steve user-107=zebrapho user-108=bwppodcast user-109=nsceres user-110=burydropin user-111=fawcettd user-112=dhyana user-113=eatspam user-114=darkstar user-115=beauty user-116=philmcph user-117=ctedorgu user-118=firstre5 user-119=donnychicago user-120=steakbridieme user-121=lkpier user-122=health2045 user-123=fortunaz user-124=leftie user-125=foods user-126=putterfc user-127=nscdp user-128=barbersh user-129=tigerlet user-130=hidden user-131=nomistakes user-132=isleofwi user-133=smrszyqg user-134=paulmca1 user-135=pugwash user-136=howardon user-137=cwsocial user-138=ninejimm user-139=reliable user-140=cambria1 user-141=cathski user-142=courseme user-143=eugincou user-144=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 11:10:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 11:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:32 nativespace-cdp sudo[2630087]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 16 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:34 nativespace-cdp sudo[2630150]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 16 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 16 11:10:34 nativespace-cdp sudo[2630159]: pam_unix(sudo:session): session closed for user onlycont
Sep 16 11:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 16 11:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:35 nativespace-cdp sudo[2630171]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 16 11:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 11:10:36 nativespace-cdp sudo[2630181]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 11:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 16 11:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:39 nativespace-cdp sudo[2630216]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 16 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 16 11:10:39 nativespace-cdp sudo[2630222]: pam_unix(sudo:session): session closed for user lkpier
Sep 16 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 16 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:40 nativespace-cdp sudo[2630237]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 16 11:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 16 11:10:40 nativespace-cdp sudo[2630245]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 16 11:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 16 11:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 16 11:10:40 nativespace-cdp sudo[2630257]: pam_unix(sudo:session): session closed for user oneoarco
Sep 16 11:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 16 11:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:41 nativespace-cdp sudo[2630269]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 16 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 16 11:10:41 nativespace-cdp sudo[2630275]: pam_unix(sudo:session): session closed for user fortunaz
Sep 16 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 16 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:41 nativespace-cdp sudo[2630288]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:41 nativespace-cdp sudo[2630292]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 16 11:10:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:58 nativespace-cdp sudo[2631239]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 16 11:10:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:58 nativespace-cdp sudo[2631245]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 11:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:59 nativespace-cdp sudo[2631260]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aw1RnPd3eDvkoBjf.~
Sep 16 11:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:59 nativespace-cdp sudo[2631265]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aw1RnPd3eDvkoBjf.~'
Sep 16 11:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:10:59 nativespace-cdp sudo[2631269]: pam_unix(sudo:session): session closed for user root
Sep 16 11:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aw1RnPd3eDvkoBjf.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 11:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:11:00 nativespace-cdp sudo[2631275]: pam_unix(sudo:session): session closed for user root
Sep 16 11:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 11:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:11:00 nativespace-cdp sudo[2631280]: pam_unix(sudo:session): session closed for user root
Sep 16 11:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 11:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 11:11:01 nativespace-cdp sudo[2631295]: pam_unix(sudo:session): session closed for user root
Sep 16 11:11:33 nativespace-cdp sshd[2631407]: Connection closed by 159.100.136.21 port 46930 [preauth]
Sep 16 11:15:57 nativespace-cdp sshd[2632558]: Bad protocol version identification 'GET / HTTP/1.1' from 185.242.226.50 port 37160
Sep 16 11:16:33 nativespace-cdp sshd[2632807]: Connection closed by 159.100.136.21 port 56512 [preauth]
Sep 16 11:21:35 nativespace-cdp sshd[2634586]: Connection closed by 159.100.136.21 port 36578 [preauth]
Sep 16 11:26:34 nativespace-cdp sshd[2636109]: Connection closed by 159.100.136.21 port 46084 [preauth]
Sep 16 11:31:33 nativespace-cdp sshd[2637883]: Connection closed by 159.100.136.21 port 54800 [preauth]
Sep 16 11:36:36 nativespace-cdp sshd[2639624]: Connection closed by 159.100.136.21 port 36098 [preauth]
Sep 16 11:41:33 nativespace-cdp sshd[2640897]: Connection closed by 159.100.136.21 port 45060 [preauth]
Sep 16 11:46:35 nativespace-cdp sshd[2642198]: Connection closed by 159.100.136.21 port 54064 [preauth]
Sep 16 11:51:33 nativespace-cdp sshd[2644144]: Connection closed by 159.100.136.21 port 34262 [preauth]
Sep 16 11:56:33 nativespace-cdp sshd[2645390]: Connection closed by 159.100.136.21 port 43296 [preauth]
Sep 16 12:01:33 nativespace-cdp sshd[2647181]: Connection closed by 159.100.136.21 port 51214 [preauth]
Sep 16 12:06:35 nativespace-cdp sshd[2648432]: Connection closed by 159.100.136.21 port 60920 [preauth]
Sep 16 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:05 nativespace-cdp sudo[2649334]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:05 nativespace-cdp sudo[2649340]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:08 nativespace-cdp sudo[2649344]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 12:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:08 nativespace-cdp sudo[2649356]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 12:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:13 nativespace-cdp sudo[2649360]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 12:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:13 nativespace-cdp sudo[2649380]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 12:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:13 nativespace-cdp sudo[2649383]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:14 nativespace-cdp sudo[2649387]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:14 nativespace-cdp sudo[2649390]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:14 nativespace-cdp sudo[2649393]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:14 nativespace-cdp sudo[2649393]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:14 nativespace-cdp sudo[2649396]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 12:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:16 nativespace-cdp sudo[2649409]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 12:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:17 nativespace-cdp sudo[2649416]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=maflemin user-2=lbscrmod user-3=athenare user-4=connect9 user-5=vantagep user-6=booff user-7=foundation user-8=markward user-9=ulsukarm user-10=hodgesonweb user-11=theblack user-12=spectrum user-13=jarvisin user-14=leereyn1 user-15=stephani user-16=still user-17=agproduc user-18=sarafoundation user-19=atestord user-20=strathar user-21=brmrjxl user-22=lakesan1 user-23=musorguk user-24=megacards user-25=wilsonsw user-26=ptkxhsbt user-27=dickemery123 user-28=martsblo user-29=magichat user-30=lbhyisi user-31=hhdugcor user-32=coursemc user-33=opaiscyx user-34=firstres user-35=seftvta user-36=jonhartl user-37=ultbcrra user-38=southlon user-39=highlegh user-40=firstred user-41=costestimatorco user-42=clarkass user-43=firstrel user-44=carsinyo user-45=fetch user-46=putterfi user-47=hubmaster
Sep 16 12:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=elecleis user-49=milloyco user-50=gilpin user-51=thqkgnbz user-52=connectedshoppin user-53=ianrayne user-54=accooper user-55=battlere user-56=oneoarco user-57=firstre2 user-58=vivienn1 user-59=brighto1 user-60=nstriton user-61=bemadonn user-62=ggaaorgu user-63=belle user-64=newstoda user-65=bedfords user-66=alexadmin user-67=skyfirec user-68=nativene user-69=stuartge user-70=askhform user-71=innovat1 user-72=sibtoncc user-73=asandcoc user-74=steve user-75=zebrapho user-76=bwppodcast user-77=nsceres user-78=burydropin user-79=fawcettd user-80=dhyana user-81=eatspam user-82=darkstar user-83=beauty user-84=philmcph user-85=ctedorgu user-86=donnychicago user-87=firstre5 user-88=steakbridieme user-89=lkpier user-90=health2045 user-91=fortunaz user-92=foods user-93=leftie user-94=putterfc user-95=nscdp user-96=barbersh user-97=tigerlet user-98=hidden user-99=nomistakes user-100=isleofwi user-101=smrszyqg
Sep 16 12:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=paulmca1 user-103=howardon user-104=pugwash user-105=cwsocial user-106=reliable user-107=ninejimm user-108=cambria1 user-109=cathski user-110=courseme user-111=eugincou user-112=hirefootballgame user-113=jennimil user-114=tomandle user-115=nbhavers user-116=careers user-117=david user-118=mcdermos user-119=chrisdal user-120=onlycont user-121=attlebor user-122=lucy user-123=romaldki user-124=branko user-125=ranxterc user-126=hodgsonmail user-127=outdoorc user-128=boldover user-129=nove user-130=sosevalu user-131=crrtipdl user-132=bakery user-133=nvihkvu user-134=cath user-135=sketchy user-136=havantho user-137=what user-138=tstardom user-139=oubpgvbx user-140=design user-141=kategilpin user-142=ladburyp user-143=dancinggardener user-144=stagingerris feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 12:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 12:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:18 nativespace-cdp sudo[2649429]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 12:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:19 nativespace-cdp sudo[2649441]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OXawvr29eUtAtGQh.~
Sep 16 12:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:19 nativespace-cdp sudo[2649445]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OXawvr29eUtAtGQh.~'
Sep 16 12:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:19 nativespace-cdp sudo[2649448]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OXawvr29eUtAtGQh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 12:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:19 nativespace-cdp sudo[2649453]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 12:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:19 nativespace-cdp sudo[2649456]: pam_unix(sudo:session): session closed for user root
Sep 16 12:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 12:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 12:10:41 nativespace-cdp sudo[2649596]: pam_unix(sudo:session): session closed for user root
Sep 16 12:11:34 nativespace-cdp sshd[2649829]: Connection closed by 159.100.136.21 port 41372 [preauth]
Sep 16 12:16:33 nativespace-cdp sshd[2651373]: Connection closed by 159.100.136.21 port 50982 [preauth]
Sep 16 12:21:33 nativespace-cdp sshd[2653006]: Connection closed by 159.100.136.21 port 60182 [preauth]
Sep 16 12:26:33 nativespace-cdp sshd[2654353]: Connection closed by 159.100.136.21 port 41304 [preauth]
Sep 16 12:31:36 nativespace-cdp sshd[2655919]: Connection closed by 159.100.136.21 port 50754 [preauth]
Sep 16 12:36:33 nativespace-cdp sshd[2657433]: Connection closed by 159.100.136.21 port 60274 [preauth]
Sep 16 12:46:34 nativespace-cdp sshd[2660479]: Connection closed by 159.100.136.21 port 48322 [preauth]
Sep 16 12:51:33 nativespace-cdp sshd[2661863]: Connection closed by 159.100.136.21 port 57932 [preauth]
Sep 16 12:56:35 nativespace-cdp sshd[2663144]: Connection closed by 159.100.136.21 port 39160 [preauth]
Sep 16 13:01:36 nativespace-cdp sshd[2664997]: Connection closed by 159.100.136.21 port 48534 [preauth]
Sep 16 13:06:34 nativespace-cdp sshd[2666769]: Connection closed by 159.100.136.21 port 58300 [preauth]
Sep 16 13:08:29 nativespace-cdp crond[2666822]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 16 13:08:29 nativespace-cdp crond[2666823]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 16 13:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 13:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:28 nativespace-cdp sudo[2668313]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 13:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:28 nativespace-cdp sudo[2668317]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 13:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:31 nativespace-cdp sudo[2668320]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 13:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:32 nativespace-cdp sudo[2668338]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 13:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:53 nativespace-cdp sudo[2668341]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 13:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:54 nativespace-cdp sudo[2668472]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 13:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:54 nativespace-cdp sudo[2668481]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 13:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:54 nativespace-cdp sudo[2668484]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 13:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:54 nativespace-cdp sudo[2668487]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 13:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:54 nativespace-cdp sudo[2668490]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 13:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:54 nativespace-cdp sudo[2668493]: pam_unix(sudo:session): session closed for user root
Sep 16 13:10:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 13:10:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:10:59 nativespace-cdp sudo[2668515]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 13:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:04 nativespace-cdp sudo[2668520]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=elecleis user-2=gilpin user-3=milloyco user-4=carsinyo user-5=fetch user-6=putterfi user-7=hubmaster user-8=ianrayne user-9=accooper user-10=thqkgnbz user-11=connectedshoppin user-12=firstres user-13=jonhartl user-14=seftvta user-15=ultbcrra user-16=opaiscyx user-17=coursemc user-18=costestimatorco user-19=firstrel user-20=clarkass user-21=southlon user-22=highlegh user-23=firstred user-24=skyfirec user-25=alexadmin user-26=stuartge user-27=askhform user-28=innovat1 user-29=nativene user-30=brighto1 user-31=nstriton user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=bedfords user-37=bemadonn user-38=ggaaorgu user-39=belle user-40=newstoda user-41=jarvisin user-42=theblack user-43=hodgesonweb user-44=spectrum user-45=still user-46=agproduc user-47=leereyn1
Sep 16 13:11:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=stephani user-49=foundation user-50=booff user-51=markward user-52=maflemin user-53=lbscrmod user-54=athenare user-55=connect9 user-56=vantagep user-57=ulsukarm user-58=martsblo user-59=ptkxhsbt user-60=dickemery123 user-61=lbhyisi user-62=hhdugcor user-63=magichat user-64=brmrjxl user-65=lakesan1 user-66=sarafoundation user-67=atestord user-68=strathar user-69=wilsonsw user-70=musorguk user-71=megacards user-72=attlebor user-73=lucy user-74=onlycont user-75=branko user-76=hodgsonmail user-77=outdoorc user-78=ranxterc user-79=romaldki user-80=tomandle user-81=jennimil user-82=mcdermos user-83=chrisdal user-84=careers user-85=nbhavers user-86=david user-87=what user-88=tstardom user-89=oubpgvbx user-90=nvihkvu user-91=sketchy user-92=cath user-93=havantho user-94=kategilpin user-95=ladburyp user-96=stagingerris user-97=dancinggardener user-98=design user-99=nove user-100=boldover user-101=sosevalu
Sep 16 13:11:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=bakery user-104=burydropin user-105=fawcettd user-106=nsceres user-107=eatspam user-108=darkstar user-109=beauty user-110=dhyana user-111=sibtoncc user-112=asandcoc user-113=zebrapho user-114=bwppodcast user-115=steve user-116=ninejimm user-117=reliable user-118=cambria1 user-119=cathski user-120=pugwash user-121=paulmca1 user-122=howardon user-123=cwsocial user-124=hirefootballgame user-125=courseme user-126=eugincou user-127=fortunaz user-128=health2045 user-129=foods user-130=leftie user-131=putterfc user-132=nscdp user-133=ctedorgu user-134=philmcph user-135=steakbridieme user-136=firstre5 user-137=donnychicago user-138=lkpier user-139=smrszyqg user-140=isleofwi user-141=barbersh user-142=tigerlet user-143=hidden user-144=nomistakes feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 16 13:11:05 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 13:11:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:08 nativespace-cdp sudo[2668609]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 13:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:09 nativespace-cdp sudo[2668671]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rhxpyrl6Z5IQqxSQ.~
Sep 16 13:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:09 nativespace-cdp sudo[2668676]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rhxpyrl6Z5IQqxSQ.~'
Sep 16 13:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:09 nativespace-cdp sudo[2668680]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rhxpyrl6Z5IQqxSQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 13:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:09 nativespace-cdp sudo[2668687]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 13:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:09 nativespace-cdp sudo[2668693]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 13:11:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 13:11:32 nativespace-cdp sudo[2668811]: pam_unix(sudo:session): session closed for user root
Sep 16 13:11:33 nativespace-cdp sshd[2668816]: Invalid user centos from 202.5.17.125 port 43772
Sep 16 13:11:33 nativespace-cdp sshd[2668823]: Connection closed by 159.100.136.21 port 39520 [preauth]
Sep 16 13:11:33 nativespace-cdp sshd[2668816]: input_userauth_request: invalid user centos [preauth]
Sep 16 13:11:33 nativespace-cdp sshd[2668816]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:11:33 nativespace-cdp sshd[2668816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.5.17.125
Sep 16 13:11:35 nativespace-cdp sshd[2668816]: Failed password for invalid user centos from 202.5.17.125 port 43772 ssh2
Sep 16 13:11:35 nativespace-cdp sshd[2668816]: Received disconnect from 202.5.17.125 port 43772:11: Bye Bye [preauth]
Sep 16 13:11:35 nativespace-cdp sshd[2668816]: Disconnected from 202.5.17.125 port 43772 [preauth]
Sep 16 13:13:28 nativespace-cdp sshd[2669647]: Invalid user nvidia from 198.12.229.101 port 55294
Sep 16 13:13:28 nativespace-cdp sshd[2669647]: input_userauth_request: invalid user nvidia [preauth]
Sep 16 13:13:28 nativespace-cdp sshd[2669647]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:13:28 nativespace-cdp sshd[2669647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.12.229.101
Sep 16 13:13:30 nativespace-cdp sshd[2669647]: Failed password for invalid user nvidia from 198.12.229.101 port 55294 ssh2
Sep 16 13:13:30 nativespace-cdp sshd[2669647]: Received disconnect from 198.12.229.101 port 55294:11: Bye Bye [preauth]
Sep 16 13:13:30 nativespace-cdp sshd[2669647]: Disconnected from 198.12.229.101 port 55294 [preauth]
Sep 16 13:13:56 nativespace-cdp sshd[2669864]: Invalid user student5 from 35.227.114.241 port 1248
Sep 16 13:13:56 nativespace-cdp sshd[2669864]: input_userauth_request: invalid user student5 [preauth]
Sep 16 13:13:56 nativespace-cdp sshd[2669864]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:13:56 nativespace-cdp sshd[2669864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.227.114.241
Sep 16 13:13:58 nativespace-cdp sshd[2669864]: Failed password for invalid user student5 from 35.227.114.241 port 1248 ssh2
Sep 16 13:13:58 nativespace-cdp sshd[2669864]: Received disconnect from 35.227.114.241 port 1248:11: Bye Bye [preauth]
Sep 16 13:13:58 nativespace-cdp sshd[2669864]: Disconnected from 35.227.114.241 port 1248 [preauth]
Sep 16 13:14:33 nativespace-cdp sshd[2670383]: Invalid user ubuntu from 31.19.177.185 port 47648
Sep 16 13:14:33 nativespace-cdp sshd[2670383]: input_userauth_request: invalid user ubuntu [preauth]
Sep 16 13:14:33 nativespace-cdp sshd[2670383]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:14:33 nativespace-cdp sshd[2670383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.19.177.185
Sep 16 13:14:36 nativespace-cdp sshd[2670383]: Failed password for invalid user ubuntu from 31.19.177.185 port 47648 ssh2
Sep 16 13:14:36 nativespace-cdp sshd[2670383]: Received disconnect from 31.19.177.185 port 47648:11: Bye Bye [preauth]
Sep 16 13:14:36 nativespace-cdp sshd[2670383]: Disconnected from 31.19.177.185 port 47648 [preauth]
Sep 16 13:14:56 nativespace-cdp sshd[2670491]: Invalid user develops from 95.85.47.10 port 42562
Sep 16 13:14:56 nativespace-cdp sshd[2670491]: input_userauth_request: invalid user develops [preauth]
Sep 16 13:14:56 nativespace-cdp sshd[2670491]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:14:56 nativespace-cdp sshd[2670491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.47.10
Sep 16 13:14:58 nativespace-cdp sshd[2670491]: Failed password for invalid user develops from 95.85.47.10 port 42562 ssh2
Sep 16 13:14:58 nativespace-cdp sshd[2670491]: Received disconnect from 95.85.47.10 port 42562:11: Bye Bye [preauth]
Sep 16 13:14:58 nativespace-cdp sshd[2670491]: Disconnected from 95.85.47.10 port 42562 [preauth]
Sep 16 13:16:34 nativespace-cdp sshd[2672004]: Connection closed by 159.100.136.21 port 49342 [preauth]
Sep 16 13:17:20 nativespace-cdp sshd[2672439]: Invalid user centos from 146.190.166.35 port 36306
Sep 16 13:17:20 nativespace-cdp sshd[2672439]: input_userauth_request: invalid user centos [preauth]
Sep 16 13:17:20 nativespace-cdp sshd[2672439]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:17:20 nativespace-cdp sshd[2672439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.166.35
Sep 16 13:17:21 nativespace-cdp sshd[2672439]: Failed password for invalid user centos from 146.190.166.35 port 36306 ssh2
Sep 16 13:17:22 nativespace-cdp sshd[2672439]: Received disconnect from 146.190.166.35 port 36306:11: Bye Bye [preauth]
Sep 16 13:17:22 nativespace-cdp sshd[2672439]: Disconnected from 146.190.166.35 port 36306 [preauth]
Sep 16 13:17:25 nativespace-cdp sshd[2672471]: Invalid user test1 from 103.53.28.86 port 44770
Sep 16 13:17:25 nativespace-cdp sshd[2672471]: input_userauth_request: invalid user test1 [preauth]
Sep 16 13:17:25 nativespace-cdp sshd[2672471]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:17:25 nativespace-cdp sshd[2672471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.53.28.86
Sep 16 13:17:27 nativespace-cdp sshd[2672471]: Failed password for invalid user test1 from 103.53.28.86 port 44770 ssh2
Sep 16 13:17:27 nativespace-cdp sshd[2672471]: Received disconnect from 103.53.28.86 port 44770:11: Bye Bye [preauth]
Sep 16 13:17:27 nativespace-cdp sshd[2672471]: Disconnected from 103.53.28.86 port 44770 [preauth]
Sep 16 13:18:58 nativespace-cdp sshd[2673405]: Invalid user www from 31.19.177.185 port 56660
Sep 16 13:18:58 nativespace-cdp sshd[2673405]: input_userauth_request: invalid user www [preauth]
Sep 16 13:18:58 nativespace-cdp sshd[2673405]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:18:58 nativespace-cdp sshd[2673405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.19.177.185
Sep 16 13:18:59 nativespace-cdp sshd[2673405]: Failed password for invalid user www from 31.19.177.185 port 56660 ssh2
Sep 16 13:18:59 nativespace-cdp sshd[2673405]: Received disconnect from 31.19.177.185 port 56660:11: Bye Bye [preauth]
Sep 16 13:18:59 nativespace-cdp sshd[2673405]: Disconnected from 31.19.177.185 port 56660 [preauth]
Sep 16 13:19:03 nativespace-cdp sshd[2673488]: Invalid user vps from 198.12.229.101 port 41964
Sep 16 13:19:03 nativespace-cdp sshd[2673488]: input_userauth_request: invalid user vps [preauth]
Sep 16 13:19:03 nativespace-cdp sshd[2673488]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:03 nativespace-cdp sshd[2673488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.12.229.101
Sep 16 13:19:05 nativespace-cdp sshd[2673488]: Failed password for invalid user vps from 198.12.229.101 port 41964 ssh2
Sep 16 13:19:08 nativespace-cdp sshd[2673488]: Received disconnect from 198.12.229.101 port 41964:11: Bye Bye [preauth]
Sep 16 13:19:08 nativespace-cdp sshd[2673488]: Disconnected from 198.12.229.101 port 41964 [preauth]
Sep 16 13:19:10 nativespace-cdp sshd[2673571]: Invalid user dev from 95.85.47.10 port 49202
Sep 16 13:19:10 nativespace-cdp sshd[2673571]: input_userauth_request: invalid user dev [preauth]
Sep 16 13:19:10 nativespace-cdp sshd[2673571]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:10 nativespace-cdp sshd[2673571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.47.10
Sep 16 13:19:12 nativespace-cdp sshd[2673594]: Invalid user admin from 35.227.114.241 port 1248
Sep 16 13:19:12 nativespace-cdp sshd[2673594]: input_userauth_request: invalid user admin [preauth]
Sep 16 13:19:12 nativespace-cdp sshd[2673594]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:12 nativespace-cdp sshd[2673594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.227.114.241
Sep 16 13:19:12 nativespace-cdp sshd[2673571]: Failed password for invalid user dev from 95.85.47.10 port 49202 ssh2
Sep 16 13:19:12 nativespace-cdp sshd[2673571]: Received disconnect from 95.85.47.10 port 49202:11: Bye Bye [preauth]
Sep 16 13:19:12 nativespace-cdp sshd[2673571]: Disconnected from 95.85.47.10 port 49202 [preauth]
Sep 16 13:19:14 nativespace-cdp sshd[2673594]: Failed password for invalid user admin from 35.227.114.241 port 1248 ssh2
Sep 16 13:19:14 nativespace-cdp sshd[2673594]: Received disconnect from 35.227.114.241 port 1248:11: Bye Bye [preauth]
Sep 16 13:19:14 nativespace-cdp sshd[2673594]: Disconnected from 35.227.114.241 port 1248 [preauth]
Sep 16 13:19:26 nativespace-cdp sshd[2673678]: Invalid user ubuntu from 146.190.166.35 port 54210
Sep 16 13:19:26 nativespace-cdp sshd[2673678]: input_userauth_request: invalid user ubuntu [preauth]
Sep 16 13:19:26 nativespace-cdp sshd[2673678]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:26 nativespace-cdp sshd[2673678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.166.35
Sep 16 13:19:28 nativespace-cdp sshd[2673678]: Failed password for invalid user ubuntu from 146.190.166.35 port 54210 ssh2
Sep 16 13:19:28 nativespace-cdp sshd[2673678]: Received disconnect from 146.190.166.35 port 54210:11: Bye Bye [preauth]
Sep 16 13:19:28 nativespace-cdp sshd[2673678]: Disconnected from 146.190.166.35 port 54210 [preauth]
Sep 16 13:19:38 nativespace-cdp sshd[2673737]: Invalid user www from 103.53.28.86 port 37842
Sep 16 13:19:38 nativespace-cdp sshd[2673737]: input_userauth_request: invalid user www [preauth]
Sep 16 13:19:38 nativespace-cdp sshd[2673737]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:38 nativespace-cdp sshd[2673737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.53.28.86
Sep 16 13:19:39 nativespace-cdp sshd[2673737]: Failed password for invalid user www from 103.53.28.86 port 37842 ssh2
Sep 16 13:19:40 nativespace-cdp sshd[2673737]: Received disconnect from 103.53.28.86 port 37842:11: Bye Bye [preauth]
Sep 16 13:19:40 nativespace-cdp sshd[2673737]: Disconnected from 103.53.28.86 port 37842 [preauth]
Sep 16 13:19:43 nativespace-cdp sshd[2673778]: Invalid user centos from 31.19.177.185 port 43444
Sep 16 13:19:43 nativespace-cdp sshd[2673778]: input_userauth_request: invalid user centos [preauth]
Sep 16 13:19:43 nativespace-cdp sshd[2673778]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:43 nativespace-cdp sshd[2673778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.19.177.185
Sep 16 13:19:45 nativespace-cdp sshd[2673778]: Failed password for invalid user centos from 31.19.177.185 port 43444 ssh2
Sep 16 13:19:45 nativespace-cdp sshd[2673778]: Received disconnect from 31.19.177.185 port 43444:11: Bye Bye [preauth]
Sep 16 13:19:45 nativespace-cdp sshd[2673778]: Disconnected from 31.19.177.185 port 43444 [preauth]
Sep 16 13:19:50 nativespace-cdp sshd[2673867]: Invalid user test2 from 95.85.47.10 port 34014
Sep 16 13:19:50 nativespace-cdp sshd[2673867]: input_userauth_request: invalid user test2 [preauth]
Sep 16 13:19:50 nativespace-cdp sshd[2673867]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:50 nativespace-cdp sshd[2673867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.47.10
Sep 16 13:19:51 nativespace-cdp sshd[2673869]: Invalid user test from 198.12.229.101 port 55160
Sep 16 13:19:51 nativespace-cdp sshd[2673869]: input_userauth_request: invalid user test [preauth]
Sep 16 13:19:51 nativespace-cdp sshd[2673869]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:51 nativespace-cdp sshd[2673869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.12.229.101
Sep 16 13:19:52 nativespace-cdp sshd[2673867]: Failed password for invalid user test2 from 95.85.47.10 port 34014 ssh2
Sep 16 13:19:52 nativespace-cdp sshd[2673869]: Failed password for invalid user test from 198.12.229.101 port 55160 ssh2
Sep 16 13:19:53 nativespace-cdp sshd[2673869]: Received disconnect from 198.12.229.101 port 55160:11: Bye Bye [preauth]
Sep 16 13:19:53 nativespace-cdp sshd[2673869]: Disconnected from 198.12.229.101 port 55160 [preauth]
Sep 16 13:19:53 nativespace-cdp sshd[2673867]: Received disconnect from 95.85.47.10 port 34014:11: Bye Bye [preauth]
Sep 16 13:19:53 nativespace-cdp sshd[2673867]: Disconnected from 95.85.47.10 port 34014 [preauth]
Sep 16 13:19:54 nativespace-cdp sshd[2673877]: Invalid user gpadmin from 35.227.114.241 port 1249
Sep 16 13:19:54 nativespace-cdp sshd[2673877]: input_userauth_request: invalid user gpadmin [preauth]
Sep 16 13:19:54 nativespace-cdp sshd[2673877]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:19:54 nativespace-cdp sshd[2673877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.227.114.241
Sep 16 13:19:56 nativespace-cdp sshd[2673877]: Failed password for invalid user gpadmin from 35.227.114.241 port 1249 ssh2
Sep 16 13:20:06 nativespace-cdp sshd[2674203]: Invalid user student6 from 146.190.166.35 port 44864
Sep 16 13:20:06 nativespace-cdp sshd[2674203]: input_userauth_request: invalid user student6 [preauth]
Sep 16 13:20:06 nativespace-cdp sshd[2674203]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:20:06 nativespace-cdp sshd[2674203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.166.35
Sep 16 13:20:08 nativespace-cdp sshd[2674203]: Failed password for invalid user student6 from 146.190.166.35 port 44864 ssh2
Sep 16 13:20:12 nativespace-cdp sshd[2674203]: Received disconnect from 146.190.166.35 port 44864:11: Bye Bye [preauth]
Sep 16 13:20:12 nativespace-cdp sshd[2674203]: Disconnected from 146.190.166.35 port 44864 [preauth]
Sep 16 13:20:28 nativespace-cdp sshd[2674428]: Invalid user nvidia from 103.53.28.86 port 50866
Sep 16 13:20:28 nativespace-cdp sshd[2674428]: input_userauth_request: invalid user nvidia [preauth]
Sep 16 13:20:28 nativespace-cdp sshd[2674428]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:20:28 nativespace-cdp sshd[2674428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.53.28.86
Sep 16 13:20:30 nativespace-cdp sshd[2674428]: Failed password for invalid user nvidia from 103.53.28.86 port 50866 ssh2
Sep 16 13:20:32 nativespace-cdp sshd[2674428]: Received disconnect from 103.53.28.86 port 50866:11: Bye Bye [preauth]
Sep 16 13:20:32 nativespace-cdp sshd[2674428]: Disconnected from 103.53.28.86 port 50866 [preauth]
Sep 16 13:21:32 nativespace-cdp sshd[2674906]: Invalid user dev01 from 202.5.17.125 port 56412
Sep 16 13:21:32 nativespace-cdp sshd[2674906]: input_userauth_request: invalid user dev01 [preauth]
Sep 16 13:21:32 nativespace-cdp sshd[2674906]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:21:32 nativespace-cdp sshd[2674906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.5.17.125
Sep 16 13:21:34 nativespace-cdp sshd[2674944]: Connection closed by 159.100.136.21 port 58052 [preauth]
Sep 16 13:21:34 nativespace-cdp sshd[2674906]: Failed password for invalid user dev01 from 202.5.17.125 port 56412 ssh2
Sep 16 13:21:35 nativespace-cdp sshd[2674906]: Received disconnect from 202.5.17.125 port 56412:11: Bye Bye [preauth]
Sep 16 13:21:35 nativespace-cdp sshd[2674906]: Disconnected from 202.5.17.125 port 56412 [preauth]
Sep 16 13:21:44 nativespace-cdp sshd[2674965]: Invalid user admin from 202.5.17.125 port 60510
Sep 16 13:21:44 nativespace-cdp sshd[2674965]: input_userauth_request: invalid user admin [preauth]
Sep 16 13:21:44 nativespace-cdp sshd[2674965]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:21:44 nativespace-cdp sshd[2674965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.5.17.125
Sep 16 13:21:46 nativespace-cdp sshd[2674965]: Failed password for invalid user admin from 202.5.17.125 port 60510 ssh2
Sep 16 13:26:34 nativespace-cdp sshd[2677581]: Connection closed by 159.100.136.21 port 38164 [preauth]
Sep 16 13:31:33 nativespace-cdp sshd[2680939]: Connection closed by 159.100.136.21 port 47412 [preauth]
Sep 16 13:36:01 nativespace-cdp sshd[2682235]: Invalid user ansible from 95.90.242.212 port 55776
Sep 16 13:36:01 nativespace-cdp sshd[2682235]: input_userauth_request: invalid user ansible [preauth]
Sep 16 13:36:01 nativespace-cdp sshd[2682235]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:36:01 nativespace-cdp sshd[2682235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.90.242.212
Sep 16 13:36:03 nativespace-cdp sshd[2682235]: Failed password for invalid user ansible from 95.90.242.212 port 55776 ssh2
Sep 16 13:36:03 nativespace-cdp sshd[2682235]: Received disconnect from 95.90.242.212 port 55776:11: Bye Bye [preauth]
Sep 16 13:36:03 nativespace-cdp sshd[2682235]: Disconnected from 95.90.242.212 port 55776 [preauth]
Sep 16 13:36:31 nativespace-cdp sshd[2682309]: Invalid user student18 from 175.106.17.99 port 60226
Sep 16 13:36:31 nativespace-cdp sshd[2682309]: input_userauth_request: invalid user student18 [preauth]
Sep 16 13:36:31 nativespace-cdp sshd[2682309]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:36:31 nativespace-cdp sshd[2682309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.106.17.99
Sep 16 13:36:33 nativespace-cdp sshd[2682309]: Failed password for invalid user student18 from 175.106.17.99 port 60226 ssh2
Sep 16 13:36:33 nativespace-cdp sshd[2682309]: Received disconnect from 175.106.17.99 port 60226:11: Bye Bye [preauth]
Sep 16 13:36:33 nativespace-cdp sshd[2682309]: Disconnected from 175.106.17.99 port 60226 [preauth]
Sep 16 13:36:33 nativespace-cdp sshd[2682321]: Connection closed by 159.100.136.21 port 55698 [preauth]
Sep 16 13:37:37 nativespace-cdp sshd[2682573]: Invalid user huawei from 95.90.242.212 port 9290
Sep 16 13:37:37 nativespace-cdp sshd[2682573]: input_userauth_request: invalid user huawei [preauth]
Sep 16 13:37:37 nativespace-cdp sshd[2682573]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:37:37 nativespace-cdp sshd[2682573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.90.242.212
Sep 16 13:37:38 nativespace-cdp sshd[2682573]: Failed password for invalid user huawei from 95.90.242.212 port 9290 ssh2
Sep 16 13:37:44 nativespace-cdp sshd[2682573]: Received disconnect from 95.90.242.212 port 9290:11: Bye Bye [preauth]
Sep 16 13:37:44 nativespace-cdp sshd[2682573]: Disconnected from 95.90.242.212 port 9290 [preauth]
Sep 16 13:38:02 nativespace-cdp sshd[2682684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.99.20  user=root
Sep 16 13:38:02 nativespace-cdp sshd[2682684]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 13:38:04 nativespace-cdp sshd[2682684]: Failed password for root from 188.166.99.20 port 55886 ssh2
Sep 16 13:38:04 nativespace-cdp sshd[2682684]: Received disconnect from 188.166.99.20 port 55886:11: Bye Bye [preauth]
Sep 16 13:38:04 nativespace-cdp sshd[2682684]: Disconnected from 188.166.99.20 port 55886 [preauth]
Sep 16 13:38:28 nativespace-cdp sshd[2682805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.90.242.212  user=root
Sep 16 13:38:28 nativespace-cdp sshd[2682805]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 13:38:30 nativespace-cdp sshd[2682805]: Failed password for root from 95.90.242.212 port 6755 ssh2
Sep 16 13:38:33 nativespace-cdp sshd[2682805]: Received disconnect from 95.90.242.212 port 6755:11: Bye Bye [preauth]
Sep 16 13:38:33 nativespace-cdp sshd[2682805]: Disconnected from 95.90.242.212 port 6755 [preauth]
Sep 16 13:40:06 nativespace-cdp sshd[2683325]: Invalid user test2 from 181.177.226.10 port 46680
Sep 16 13:40:06 nativespace-cdp sshd[2683325]: input_userauth_request: invalid user test2 [preauth]
Sep 16 13:40:06 nativespace-cdp sshd[2683325]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:40:06 nativespace-cdp sshd[2683325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.177.226.10
Sep 16 13:40:08 nativespace-cdp sshd[2683325]: Failed password for invalid user test2 from 181.177.226.10 port 46680 ssh2
Sep 16 13:40:09 nativespace-cdp sshd[2683325]: Received disconnect from 181.177.226.10 port 46680:11: Bye Bye [preauth]
Sep 16 13:40:09 nativespace-cdp sshd[2683325]: Disconnected from 181.177.226.10 port 46680 [preauth]
Sep 16 13:41:14 nativespace-cdp sshd[2683479]: Invalid user dev from 128.14.117.119 port 48270
Sep 16 13:41:14 nativespace-cdp sshd[2683479]: input_userauth_request: invalid user dev [preauth]
Sep 16 13:41:14 nativespace-cdp sshd[2683479]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:41:14 nativespace-cdp sshd[2683479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.117.119
Sep 16 13:41:14 nativespace-cdp sshd[2683497]: Invalid user test from 46.101.171.235 port 45288
Sep 16 13:41:14 nativespace-cdp sshd[2683497]: input_userauth_request: invalid user test [preauth]
Sep 16 13:41:14 nativespace-cdp sshd[2683497]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:41:14 nativespace-cdp sshd[2683497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.171.235
Sep 16 13:41:16 nativespace-cdp sshd[2683479]: Failed password for invalid user dev from 128.14.117.119 port 48270 ssh2
Sep 16 13:41:17 nativespace-cdp sshd[2683497]: Failed password for invalid user test from 46.101.171.235 port 45288 ssh2
Sep 16 13:41:20 nativespace-cdp sshd[2683479]: Received disconnect from 128.14.117.119 port 48270:11: Bye Bye [preauth]
Sep 16 13:41:20 nativespace-cdp sshd[2683479]: Disconnected from 128.14.117.119 port 48270 [preauth]
Sep 16 13:41:20 nativespace-cdp sshd[2683497]: Received disconnect from 46.101.171.235 port 45288:11: Bye Bye [preauth]
Sep 16 13:41:20 nativespace-cdp sshd[2683497]: Disconnected from 46.101.171.235 port 45288 [preauth]
Sep 16 13:41:33 nativespace-cdp sshd[2683556]: Connection closed by 159.100.136.21 port 36462 [preauth]
Sep 16 13:43:31 nativespace-cdp sshd[2684038]: Invalid user sammy from 188.166.99.20 port 38402
Sep 16 13:43:31 nativespace-cdp sshd[2684038]: input_userauth_request: invalid user sammy [preauth]
Sep 16 13:43:31 nativespace-cdp sshd[2684038]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:43:31 nativespace-cdp sshd[2684038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.99.20
Sep 16 13:43:34 nativespace-cdp sshd[2684038]: Failed password for invalid user sammy from 188.166.99.20 port 38402 ssh2
Sep 16 13:43:37 nativespace-cdp sshd[2684038]: Received disconnect from 188.166.99.20 port 38402:11: Bye Bye [preauth]
Sep 16 13:43:37 nativespace-cdp sshd[2684038]: Disconnected from 188.166.99.20 port 38402 [preauth]
Sep 16 13:43:48 nativespace-cdp sshd[2684086]: Invalid user sammy from 46.101.171.235 port 41122
Sep 16 13:43:48 nativespace-cdp sshd[2684086]: input_userauth_request: invalid user sammy [preauth]
Sep 16 13:43:48 nativespace-cdp sshd[2684086]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:43:48 nativespace-cdp sshd[2684086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.171.235
Sep 16 13:43:50 nativespace-cdp sshd[2684086]: Failed password for invalid user sammy from 46.101.171.235 port 41122 ssh2
Sep 16 13:43:50 nativespace-cdp sshd[2684086]: Received disconnect from 46.101.171.235 port 41122:11: Bye Bye [preauth]
Sep 16 13:43:50 nativespace-cdp sshd[2684086]: Disconnected from 46.101.171.235 port 41122 [preauth]
Sep 16 13:44:01 nativespace-cdp sshd[2684117]: Invalid user ubuntu from 181.177.226.10 port 50336
Sep 16 13:44:01 nativespace-cdp sshd[2684117]: input_userauth_request: invalid user ubuntu [preauth]
Sep 16 13:44:01 nativespace-cdp sshd[2684117]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:44:01 nativespace-cdp sshd[2684117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.177.226.10
Sep 16 13:44:01 nativespace-cdp sshd[2684122]: Invalid user user from 175.106.17.99 port 46530
Sep 16 13:44:01 nativespace-cdp sshd[2684122]: input_userauth_request: invalid user user [preauth]
Sep 16 13:44:01 nativespace-cdp sshd[2684122]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:44:01 nativespace-cdp sshd[2684122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.106.17.99
Sep 16 13:44:02 nativespace-cdp sshd[2684117]: Failed password for invalid user ubuntu from 181.177.226.10 port 50336 ssh2
Sep 16 13:44:02 nativespace-cdp sshd[2684117]: Received disconnect from 181.177.226.10 port 50336:11: Bye Bye [preauth]
Sep 16 13:44:02 nativespace-cdp sshd[2684117]: Disconnected from 181.177.226.10 port 50336 [preauth]
Sep 16 13:44:03 nativespace-cdp sshd[2684122]: Failed password for invalid user user from 175.106.17.99 port 46530 ssh2
Sep 16 13:44:03 nativespace-cdp sshd[2684122]: Received disconnect from 175.106.17.99 port 46530:11: Bye Bye [preauth]
Sep 16 13:44:03 nativespace-cdp sshd[2684122]: Disconnected from 175.106.17.99 port 46530 [preauth]
Sep 16 13:44:13 nativespace-cdp sshd[2684170]: Invalid user develops from 128.14.117.119 port 56172
Sep 16 13:44:13 nativespace-cdp sshd[2684170]: input_userauth_request: invalid user develops [preauth]
Sep 16 13:44:13 nativespace-cdp sshd[2684170]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:44:13 nativespace-cdp sshd[2684170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.117.119
Sep 16 13:44:15 nativespace-cdp sshd[2684170]: Failed password for invalid user develops from 128.14.117.119 port 56172 ssh2
Sep 16 13:44:16 nativespace-cdp sshd[2684170]: Received disconnect from 128.14.117.119 port 56172:11: Bye Bye [preauth]
Sep 16 13:44:16 nativespace-cdp sshd[2684170]: Disconnected from 128.14.117.119 port 56172 [preauth]
Sep 16 13:44:16 nativespace-cdp sshd[2684196]: Invalid user ubuntu from 188.166.99.20 port 43792
Sep 16 13:44:16 nativespace-cdp sshd[2684196]: input_userauth_request: invalid user ubuntu [preauth]
Sep 16 13:44:16 nativespace-cdp sshd[2684196]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:44:16 nativespace-cdp sshd[2684196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.99.20
Sep 16 13:44:18 nativespace-cdp sshd[2684196]: Failed password for invalid user ubuntu from 188.166.99.20 port 43792 ssh2
Sep 16 13:44:18 nativespace-cdp sshd[2684196]: Received disconnect from 188.166.99.20 port 43792:11: Bye Bye [preauth]
Sep 16 13:44:18 nativespace-cdp sshd[2684196]: Disconnected from 188.166.99.20 port 43792 [preauth]
Sep 16 13:44:24 nativespace-cdp sshd[2684297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.171.235  user=root
Sep 16 13:44:24 nativespace-cdp sshd[2684297]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 13:44:26 nativespace-cdp sshd[2684297]: Failed password for root from 46.101.171.235 port 53950 ssh2
Sep 16 13:44:29 nativespace-cdp sshd[2684297]: Received disconnect from 46.101.171.235 port 53950:11: Bye Bye [preauth]
Sep 16 13:44:29 nativespace-cdp sshd[2684297]: Disconnected from 46.101.171.235 port 53950 [preauth]
Sep 16 13:44:49 nativespace-cdp sshd[2684386]: Invalid user user74 from 181.177.226.10 port 34970
Sep 16 13:44:49 nativespace-cdp sshd[2684386]: input_userauth_request: invalid user user74 [preauth]
Sep 16 13:44:49 nativespace-cdp sshd[2684386]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:44:49 nativespace-cdp sshd[2684386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.177.226.10
Sep 16 13:44:51 nativespace-cdp sshd[2684386]: Failed password for invalid user user74 from 181.177.226.10 port 34970 ssh2
Sep 16 13:44:52 nativespace-cdp sshd[2684386]: Received disconnect from 181.177.226.10 port 34970:11: Bye Bye [preauth]
Sep 16 13:44:52 nativespace-cdp sshd[2684386]: Disconnected from 181.177.226.10 port 34970 [preauth]
Sep 16 13:45:03 nativespace-cdp sshd[2684438]: Invalid user testuser from 175.106.17.99 port 38080
Sep 16 13:45:03 nativespace-cdp sshd[2684438]: input_userauth_request: invalid user testuser [preauth]
Sep 16 13:45:03 nativespace-cdp sshd[2684438]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:45:03 nativespace-cdp sshd[2684438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.106.17.99
Sep 16 13:45:03 nativespace-cdp sshd[2684578]: Invalid user test2 from 128.14.117.119 port 52088
Sep 16 13:45:03 nativespace-cdp sshd[2684578]: input_userauth_request: invalid user test2 [preauth]
Sep 16 13:45:03 nativespace-cdp sshd[2684578]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 13:45:03 nativespace-cdp sshd[2684578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.117.119
Sep 16 13:45:05 nativespace-cdp sshd[2684438]: Failed password for invalid user testuser from 175.106.17.99 port 38080 ssh2
Sep 16 13:45:05 nativespace-cdp sshd[2684438]: Received disconnect from 175.106.17.99 port 38080:11: Bye Bye [preauth]
Sep 16 13:45:05 nativespace-cdp sshd[2684438]: Disconnected from 175.106.17.99 port 38080 [preauth]
Sep 16 13:45:06 nativespace-cdp sshd[2684578]: Failed password for invalid user test2 from 128.14.117.119 port 52088 ssh2
Sep 16 13:46:33 nativespace-cdp sshd[2685461]: Connection closed by 159.100.136.21 port 46124 [preauth]
Sep 16 13:51:34 nativespace-cdp sshd[2686733]: Connection closed by 159.100.136.21 port 55340 [preauth]
Sep 16 13:56:34 nativespace-cdp sshd[2687995]: Connection closed by 159.100.136.21 port 36556 [preauth]
Sep 16 14:01:33 nativespace-cdp sshd[2689639]: Connection closed by 159.100.136.21 port 45794 [preauth]
Sep 16 14:06:34 nativespace-cdp sshd[2691089]: Connection closed by 159.100.136.21 port 54374 [preauth]
Sep 16 14:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 14:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:49 nativespace-cdp sudo[2691749]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:49 nativespace-cdp sudo[2691753]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:50 nativespace-cdp sudo[2691758]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 14:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:50 nativespace-cdp sudo[2691766]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 14:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691772]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691791]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691796]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691800]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691805]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691810]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:54 nativespace-cdp sudo[2691816]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:57 nativespace-cdp sudo[2691830]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 14:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:58 nativespace-cdp sudo[2691836]: pam_unix(sudo:session): session closed for user root
Sep 16 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=vantagep user-3=athenare user-4=connect9 user-5=lbscrmod user-6=maflemin user-7=foundation user-8=booff user-9=markward user-10=stephani user-11=leereyn1 user-12=agproduc user-13=still user-14=spectrum user-15=hodgesonweb user-16=theblack user-17=jarvisin user-18=megacards user-19=musorguk user-20=wilsonsw user-21=strathar user-22=atestord user-23=sarafoundation user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=hhdugcor user-28=lbhyisi user-29=dickemery123 user-30=ptkxhsbt user-31=martsblo user-32=firstred user-33=highlegh user-34=southlon user-35=firstrel user-36=clarkass user-37=costestimatorco user-38=coursemc user-39=opaiscyx user-40=ultbcrra user-41=jonhartl user-42=seftvta user-43=firstres user-44=connectedshoppin user-45=thqkgnbz user-46=accooper user-47=ianrayne
Sep 16 14:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=putterfi user-49=hubmaster user-50=fetch user-51=carsinyo user-52=gilpin user-53=milloyco user-54=elecleis user-55=newstoda user-56=ggaaorgu user-57=belle user-58=bemadonn user-59=bedfords user-60=vivienn1 user-61=firstre2 user-62=oneoarco user-63=battlere user-64=nstriton user-65=brighto1 user-66=nativene user-67=innovat1 user-68=stuartge user-69=askhform user-70=skyfirec user-71=alexadmin user-72=steve user-73=bwppodcast user-74=zebrapho user-75=asandcoc user-76=sibtoncc user-77=dhyana user-78=beauty user-79=darkstar user-80=eatspam user-81=nsceres user-82=fawcettd user-83=burydropin user-84=nomistakes user-85=hidden user-86=barbersh user-87=tigerlet user-88=isleofwi user-89=smrszyqg user-90=lkpier user-91=steakbridieme user-92=firstre5 user-93=donnychicago user-94=philmcph user-95=ctedorgu user-96=nscdp user-97=putterfc user-98=foods user-99=leftie user-100=fortunaz user-101=health2045
Sep 16 14:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eugincou user-103=courseme user-104=hirefootballgame user-105=cwsocial user-106=paulmca1 user-107=howardon user-108=pugwash user-109=cambria1 user-110=cathski user-111=ninejimm user-112=reliable user-113=david user-114=nbhavers user-115=careers user-116=chrisdal user-117=mcdermos user-118=jennimil user-119=tomandle user-120=romaldki user-121=hodgsonmail user-122=ranxterc user-123=outdoorc user-124=branko user-125=onlycont user-126=lucy user-127=attlebor user-128=bakery user-129=crrtipdl user-130=sosevalu user-131=boldover user-132=nove user-133=design user-134=dancinggardener user-135=stagingerris user-136=ladburyp user-137=kategilpin user-138=havantho user-139=sketchy user-140=cath user-141=nvihkvu user-142=oubpgvbx user-143=tstardom user-144=what feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 14:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:09:59 nativespace-cdp sudo[2691853]: pam_unix(sudo:session): session closed for user root
Sep 16 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:10:00 nativespace-cdp sudo[2691860]: pam_unix(sudo:session): session closed for user root
Sep 16 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hdPSnuBZ1EwZanha.~
Sep 16 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:10:00 nativespace-cdp sudo[2691866]: pam_unix(sudo:session): session closed for user root
Sep 16 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hdPSnuBZ1EwZanha.~'
Sep 16 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:10:00 nativespace-cdp sudo[2691869]: pam_unix(sudo:session): session closed for user root
Sep 16 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hdPSnuBZ1EwZanha.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:10:00 nativespace-cdp sudo[2691876]: pam_unix(sudo:session): session closed for user root
Sep 16 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:10:00 nativespace-cdp sudo[2691881]: pam_unix(sudo:session): session closed for user root
Sep 16 14:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 14:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 14:10:20 nativespace-cdp sudo[2692081]: pam_unix(sudo:session): session closed for user root
Sep 16 14:11:33 nativespace-cdp sshd[2692363]: Connection closed by 159.100.136.21 port 34304 [preauth]
Sep 16 14:16:33 nativespace-cdp sshd[2694167]: Connection closed by 159.100.136.21 port 43900 [preauth]
Sep 16 14:21:33 nativespace-cdp sshd[2695413]: Connection closed by 159.100.136.21 port 53044 [preauth]
Sep 16 14:26:33 nativespace-cdp sshd[2696491]: Connection closed by 159.100.136.21 port 33720 [preauth]
Sep 16 14:31:34 nativespace-cdp sshd[2697916]: Connection closed by 159.100.136.21 port 42772 [preauth]
Sep 16 14:36:33 nativespace-cdp sshd[2699424]: Connection closed by 159.100.136.21 port 52326 [preauth]
Sep 16 14:41:33 nativespace-cdp sshd[2701161]: Connection closed by 159.100.136.21 port 33120 [preauth]
Sep 16 14:46:36 nativespace-cdp sshd[2702773]: Connection closed by 159.100.136.21 port 42016 [preauth]
Sep 16 14:51:33 nativespace-cdp sshd[2704110]: Connection closed by 159.100.136.21 port 50570 [preauth]
Sep 16 14:56:33 nativespace-cdp sshd[2705219]: Connection closed by 159.100.136.21 port 58692 [preauth]
Sep 16 15:01:33 nativespace-cdp sshd[2706482]: Connection closed by 159.100.136.21 port 39182 [preauth]
Sep 16 15:06:33 nativespace-cdp sshd[2708040]: Connection closed by 159.100.136.21 port 48712 [preauth]
Sep 16 15:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 15:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:43 nativespace-cdp sudo[2708751]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:43 nativespace-cdp sudo[2708756]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:43 nativespace-cdp sudo[2708761]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:43 nativespace-cdp sudo[2708767]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 15:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708773]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708788]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708793]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708797]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708802]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708808]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 15:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:47 nativespace-cdp sudo[2708814]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:55 nativespace-cdp sudo[2708834]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:55 nativespace-cdp sudo[2708842]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=vantagep user-3=connect9 user-4=athenare user-5=lbscrmod user-6=maflemin user-7=booff user-8=foundation user-9=markward user-10=stephani user-11=leereyn1 user-12=agproduc user-13=still user-14=spectrum user-15=theblack user-16=hodgesonweb user-17=jarvisin user-18=megacards user-19=musorguk user-20=wilsonsw user-21=strathar user-22=atestord user-23=sarafoundation user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=hhdugcor user-28=lbhyisi user-29=dickemery123 user-30=ptkxhsbt user-31=martsblo user-32=firstred user-33=highlegh user-34=southlon user-35=clarkass user-36=firstrel user-37=costestimatorco user-38=coursemc user-39=opaiscyx user-40=ultbcrra user-41=jonhartl user-42=seftvta user-43=firstres user-44=connectedshoppin user-45=thqkgnbz user-46=accooper user-47=ianrayne
Sep 16 15:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=putterfi user-49=hubmaster user-50=fetch user-51=carsinyo user-52=gilpin user-53=milloyco user-54=elecleis user-55=newstoda user-56=belle user-57=ggaaorgu user-58=bemadonn user-59=bedfords user-60=vivienn1 user-61=firstre2 user-62=oneoarco user-63=battlere user-64=nstriton user-65=brighto1 user-66=nativene user-67=innovat1 user-68=askhform user-69=stuartge user-70=skyfirec user-71=alexadmin user-72=steve user-73=bwppodcast user-74=zebrapho user-75=asandcoc user-76=sibtoncc user-77=dhyana user-78=beauty user-79=darkstar user-80=eatspam user-81=nsceres user-82=fawcettd user-83=burydropin user-84=nomistakes user-85=hidden user-86=barbersh user-87=tigerlet user-88=isleofwi user-89=smrszyqg user-90=lkpier user-91=firstre5 user-92=steakbridieme user-93=donnychicago user-94=ctedorgu user-95=philmcph user-96=nscdp user-97=putterfc user-98=leftie user-99=foods user-100=fortunaz user-101=health2045
Sep 16 15:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eugincou user-103=courseme user-104=hirefootballgame user-105=cwsocial user-106=pugwash user-107=paulmca1 user-108=howardon user-109=cambria1 user-110=cathski user-111=reliable user-112=ninejimm user-113=david user-114=nbhavers user-115=careers user-116=chrisdal user-117=mcdermos user-118=jennimil user-119=tomandle user-120=romaldki user-121=hodgsonmail user-122=ranxterc user-123=outdoorc user-124=branko user-125=onlycont user-126=lucy user-127=attlebor user-128=bakery user-129=crrtipdl user-130=sosevalu user-131=boldover user-132=nove user-133=design user-134=stagingerris user-135=dancinggardener user-136=ladburyp user-137=kategilpin user-138=havantho user-139=sketchy user-140=cath user-141=nvihkvu user-142=tstardom user-143=oubpgvbx user-144=what feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 15:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:56 nativespace-cdp sudo[2708849]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 15:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:56 nativespace-cdp sudo[2708860]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BefwPiyCODS0a2D6.~
Sep 16 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:57 nativespace-cdp sudo[2708865]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BefwPiyCODS0a2D6.~'
Sep 16 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:57 nativespace-cdp sudo[2708869]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BefwPiyCODS0a2D6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:57 nativespace-cdp sudo[2708875]: pam_unix(sudo:session): session closed for user root
Sep 16 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:09:57 nativespace-cdp sudo[2708880]: pam_unix(sudo:session): session closed for user root
Sep 16 15:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 15:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 15:10:04 nativespace-cdp sudo[2709031]: pam_unix(sudo:session): session closed for user root
Sep 16 15:11:33 nativespace-cdp sshd[2709579]: Connection closed by 159.100.136.21 port 58202 [preauth]
Sep 16 15:16:34 nativespace-cdp sshd[2711018]: Connection closed by 159.100.136.21 port 39642 [preauth]
Sep 16 15:21:35 nativespace-cdp sshd[2712616]: Connection closed by 159.100.136.21 port 47732 [preauth]
Sep 16 15:23:44 nativespace-cdp sshd[2713151]: Invalid user oracle from 196.203.207.166 port 51050
Sep 16 15:23:44 nativespace-cdp sshd[2713151]: input_userauth_request: invalid user oracle [preauth]
Sep 16 15:23:44 nativespace-cdp sshd[2713151]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:23:44 nativespace-cdp sshd[2713151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.203.207.166
Sep 16 15:23:46 nativespace-cdp sshd[2713151]: Failed password for invalid user oracle from 196.203.207.166 port 51050 ssh2
Sep 16 15:23:47 nativespace-cdp sshd[2713151]: Received disconnect from 196.203.207.166 port 51050:11: Bye Bye [preauth]
Sep 16 15:23:47 nativespace-cdp sshd[2713151]: Disconnected from 196.203.207.166 port 51050 [preauth]
Sep 16 15:25:56 nativespace-cdp sshd[2713624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.79.185.10  user=root
Sep 16 15:25:56 nativespace-cdp sshd[2713624]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 15:25:58 nativespace-cdp sshd[2713624]: Failed password for root from 41.79.185.10 port 50380 ssh2
Sep 16 15:25:58 nativespace-cdp sshd[2713624]: Received disconnect from 41.79.185.10 port 50380:11: Bye Bye [preauth]
Sep 16 15:25:58 nativespace-cdp sshd[2713624]: Disconnected from 41.79.185.10 port 50380 [preauth]
Sep 16 15:26:33 nativespace-cdp sshd[2713750]: Connection closed by 159.100.136.21 port 56874 [preauth]
Sep 16 15:29:04 nativespace-cdp sshd[2714335]: Invalid user dolphinscheduler from 115.71.237.81 port 40000
Sep 16 15:29:04 nativespace-cdp sshd[2714335]: input_userauth_request: invalid user dolphinscheduler [preauth]
Sep 16 15:29:04 nativespace-cdp sshd[2714335]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:29:04 nativespace-cdp sshd[2714335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.71.237.81
Sep 16 15:29:06 nativespace-cdp sshd[2714335]: Failed password for invalid user dolphinscheduler from 115.71.237.81 port 40000 ssh2
Sep 16 15:29:07 nativespace-cdp sshd[2714335]: Received disconnect from 115.71.237.81 port 40000:11: Bye Bye [preauth]
Sep 16 15:29:07 nativespace-cdp sshd[2714335]: Disconnected from 115.71.237.81 port 40000 [preauth]
Sep 16 15:29:22 nativespace-cdp sshd[2714396]: Invalid user es from 196.203.207.166 port 40598
Sep 16 15:29:22 nativespace-cdp sshd[2714396]: input_userauth_request: invalid user es [preauth]
Sep 16 15:29:22 nativespace-cdp sshd[2714396]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:29:22 nativespace-cdp sshd[2714396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.203.207.166
Sep 16 15:29:24 nativespace-cdp sshd[2714396]: Failed password for invalid user es from 196.203.207.166 port 40598 ssh2
Sep 16 15:29:24 nativespace-cdp sshd[2714396]: Received disconnect from 196.203.207.166 port 40598:11: Bye Bye [preauth]
Sep 16 15:29:24 nativespace-cdp sshd[2714396]: Disconnected from 196.203.207.166 port 40598 [preauth]
Sep 16 15:30:06 nativespace-cdp sshd[2714694]: Invalid user dev01 from 196.203.207.166 port 55858
Sep 16 15:30:06 nativespace-cdp sshd[2714694]: input_userauth_request: invalid user dev01 [preauth]
Sep 16 15:30:06 nativespace-cdp sshd[2714694]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:30:06 nativespace-cdp sshd[2714694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.203.207.166
Sep 16 15:30:07 nativespace-cdp sshd[2714696]: Invalid user test from 41.79.185.10 port 45390
Sep 16 15:30:07 nativespace-cdp sshd[2714696]: input_userauth_request: invalid user test [preauth]
Sep 16 15:30:07 nativespace-cdp sshd[2714696]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:30:07 nativespace-cdp sshd[2714696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.79.185.10
Sep 16 15:30:08 nativespace-cdp sshd[2714694]: Failed password for invalid user dev01 from 196.203.207.166 port 55858 ssh2
Sep 16 15:30:08 nativespace-cdp sshd[2714694]: Received disconnect from 196.203.207.166 port 55858:11: Bye Bye [preauth]
Sep 16 15:30:08 nativespace-cdp sshd[2714694]: Disconnected from 196.203.207.166 port 55858 [preauth]
Sep 16 15:30:08 nativespace-cdp sshd[2714696]: Failed password for invalid user test from 41.79.185.10 port 45390 ssh2
Sep 16 15:30:09 nativespace-cdp sshd[2714696]: Received disconnect from 41.79.185.10 port 45390:11: Bye Bye [preauth]
Sep 16 15:30:09 nativespace-cdp sshd[2714696]: Disconnected from 41.79.185.10 port 45390 [preauth]
Sep 16 15:30:26 nativespace-cdp sshd[2714800]: Invalid user oracle from 115.71.237.81 port 56162
Sep 16 15:30:26 nativespace-cdp sshd[2714800]: input_userauth_request: invalid user oracle [preauth]
Sep 16 15:30:26 nativespace-cdp sshd[2714800]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:30:26 nativespace-cdp sshd[2714800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.71.237.81
Sep 16 15:30:27 nativespace-cdp sshd[2714800]: Failed password for invalid user oracle from 115.71.237.81 port 56162 ssh2
Sep 16 15:30:28 nativespace-cdp sshd[2714800]: Received disconnect from 115.71.237.81 port 56162:11: Bye Bye [preauth]
Sep 16 15:30:28 nativespace-cdp sshd[2714800]: Disconnected from 115.71.237.81 port 56162 [preauth]
Sep 16 15:31:02 nativespace-cdp sshd[2714979]: Invalid user adm01 from 41.79.185.10 port 56632
Sep 16 15:31:02 nativespace-cdp sshd[2714979]: input_userauth_request: invalid user adm01 [preauth]
Sep 16 15:31:02 nativespace-cdp sshd[2714979]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 15:31:02 nativespace-cdp sshd[2714979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.79.185.10
Sep 16 15:31:05 nativespace-cdp sshd[2714979]: Failed password for invalid user adm01 from 41.79.185.10 port 56632 ssh2
Sep 16 15:31:09 nativespace-cdp sshd[2715087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.71.237.81  user=root
Sep 16 15:31:09 nativespace-cdp sshd[2715087]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 16 15:31:11 nativespace-cdp sshd[2715087]: Failed password for root from 115.71.237.81 port 40750 ssh2
Sep 16 15:31:11 nativespace-cdp sshd[2715087]: Received disconnect from 115.71.237.81 port 40750:11: Bye Bye [preauth]
Sep 16 15:31:11 nativespace-cdp sshd[2715087]: Disconnected from 115.71.237.81 port 40750 [preauth]
Sep 16 15:31:33 nativespace-cdp sshd[2715395]: Connection closed by 159.100.136.21 port 38392 [preauth]
Sep 16 15:36:35 nativespace-cdp sshd[2716849]: Connection closed by 159.100.136.21 port 48160 [preauth]
Sep 16 15:41:33 nativespace-cdp sshd[2718099]: Connection closed by 159.100.136.21 port 56692 [preauth]
Sep 16 15:46:37 nativespace-cdp sshd[2719387]: Connection closed by 159.100.136.21 port 37708 [preauth]
Sep 16 15:51:37 nativespace-cdp sshd[2721057]: Connection closed by 159.100.136.21 port 46962 [preauth]
Sep 16 15:56:34 nativespace-cdp sshd[2722319]: Connection closed by 159.100.136.21 port 56448 [preauth]
Sep 16 16:01:33 nativespace-cdp sshd[2723762]: Connection closed by 159.100.136.21 port 37812 [preauth]
Sep 16 16:06:36 nativespace-cdp sshd[2725098]: Connection closed by 159.100.136.21 port 45590 [preauth]
Sep 16 16:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 16:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:09:49 nativespace-cdp sudo[2725882]: pam_unix(sudo:session): session closed for user root
Sep 16 16:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 16:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:09:49 nativespace-cdp sudo[2725887]: pam_unix(sudo:session): session closed for user root
Sep 16 16:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 16:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:09:58 nativespace-cdp sudo[2725892]: pam_unix(sudo:session): session closed for user root
Sep 16 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:09:58 nativespace-cdp sudo[2725924]: pam_unix(sudo:session): session closed for user root
Sep 16 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2725930]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 16:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2726155]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 16:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2726158]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 16:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2726161]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 16:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2726164]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 16:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2726167]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 16:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:07 nativespace-cdp sudo[2726172]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 16:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:09 nativespace-cdp sudo[2726191]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 16:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:11 nativespace-cdp sudo[2726196]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=carsinyo user-2=fetch user-3=hubmaster user-4=putterfi user-5=elecleis user-6=milloyco user-7=gilpin user-8=thqkgnbz user-9=connectedshoppin user-10=ianrayne user-11=accooper user-12=opaiscyx user-13=coursemc user-14=firstres user-15=seftvta user-16=jonhartl user-17=ultbcrra user-18=southlon user-19=highlegh user-20=firstred user-21=costestimatorco user-22=clarkass user-23=firstrel user-24=alexadmin user-25=skyfirec user-26=nativene user-27=stuartge user-28=askhform user-29=innovat1 user-30=battlere user-31=oneoarco user-32=firstre2 user-33=vivienn1 user-34=brighto1 user-35=nstriton user-36=bemadonn user-37=ggaaorgu user-38=belle user-39=newstoda user-40=bedfords user-41=hodgesonweb user-42=theblack user-43=spectrum user-44=jarvisin user-45=leereyn1 user-46=stephani user-47=still
Sep 16 16:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=agproduc user-49=maflemin user-50=lbscrmod user-51=athenare user-52=connect9 user-53=vantagep user-54=foundation user-55=booff user-56=markward user-57=ulsukarm user-58=ptkxhsbt user-59=dickemery123 user-60=martsblo user-61=magichat user-62=lbhyisi user-63=hhdugcor user-64=sarafoundation user-65=atestord user-66=strathar user-67=lakesan1 user-68=brmrjxl user-69=musorguk user-70=megacards user-71=wilsonsw user-72=onlycont user-73=attlebor user-74=lucy user-75=romaldki user-76=branko user-77=hodgsonmail user-78=ranxterc user-79=outdoorc user-80=jennimil user-81=tomandle user-82=nbhavers user-83=careers user-84=david user-85=mcdermos user-86=chrisdal user-87=nvihkvu user-88=sketchy user-89=cath user-90=havantho user-91=what user-92=tstardom user-93=oubpgvbx user-94=design user-95=kategilpin user-96=ladburyp user-97=dancinggardener user-98=stagingerris user-99=boldover user-100=nove user-101=sosevalu
Sep 16 16:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=bakery user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=eatspam user-109=darkstar user-110=beauty user-111=sibtoncc user-112=asandcoc user-113=steve user-114=zebrapho user-115=bwppodcast user-116=howardon user-117=paulmca1 user-118=pugwash user-119=cwsocial user-120=reliable user-121=ninejimm user-122=cathski user-123=cambria1 user-124=courseme user-125=eugincou user-126=hirefootballgame user-127=ctedorgu user-128=philmcph user-129=firstre5 user-130=steakbridieme user-131=donnychicago user-132=lkpier user-133=fortunaz user-134=health2045 user-135=foods user-136=leftie user-137=putterfc user-138=nscdp user-139=tigerlet user-140=barbersh user-141=hidden user-142=nomistakes user-143=smrszyqg user-144=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 16 16:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:14 nativespace-cdp sudo[2726212]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:15 nativespace-cdp sudo[2726267]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TSQAWcmBBq8qRk19.~
Sep 16 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:15 nativespace-cdp sudo[2726272]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TSQAWcmBBq8qRk19.~'
Sep 16 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:15 nativespace-cdp sudo[2726275]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TSQAWcmBBq8qRk19.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:15 nativespace-cdp sudo[2726279]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:15 nativespace-cdp sudo[2726282]: pam_unix(sudo:session): session closed for user root
Sep 16 16:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 16:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 16:10:17 nativespace-cdp sudo[2726302]: pam_unix(sudo:session): session closed for user root
Sep 16 16:11:38 nativespace-cdp sshd[2726597]: Connection closed by 159.100.136.21 port 54476 [preauth]
Sep 16 16:16:36 nativespace-cdp sshd[2728344]: Connection closed by 159.100.136.21 port 35958 [preauth]
Sep 16 16:21:33 nativespace-cdp sshd[2730869]: Connection closed by 159.100.136.21 port 45016 [preauth]
Sep 16 16:23:31 nativespace-cdp sshd[2732299]: Bad protocol version identification '\003' from 179.60.149.238 port 65314
Sep 16 16:26:33 nativespace-cdp sshd[2733153]: Connection closed by 159.100.136.21 port 54036 [preauth]
Sep 16 16:31:34 nativespace-cdp sshd[2734417]: Connection closed by 159.100.136.21 port 34110 [preauth]
Sep 16 16:36:34 nativespace-cdp sshd[2736113]: Connection closed by 159.100.136.21 port 44108 [preauth]
Sep 16 16:41:36 nativespace-cdp sshd[2737497]: Connection closed by 159.100.136.21 port 53118 [preauth]
Sep 16 16:46:33 nativespace-cdp sshd[2738727]: Connection closed by 159.100.136.21 port 34018 [preauth]
Sep 16 16:51:33 nativespace-cdp sshd[2740079]: Connection closed by 159.100.136.21 port 43660 [preauth]
Sep 16 16:56:33 nativespace-cdp sshd[2741684]: Connection closed by 159.100.136.21 port 53086 [preauth]
Sep 16 17:01:35 nativespace-cdp sshd[2743427]: Connection closed by 159.100.136.21 port 34086 [preauth]
Sep 16 17:06:33 nativespace-cdp sshd[2744712]: Connection closed by 159.100.136.21 port 43876 [preauth]
Sep 16 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:09:58 nativespace-cdp sudo[2745535]: pam_unix(sudo:session): session closed for user root
Sep 16 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:09:58 nativespace-cdp sudo[2745540]: pam_unix(sudo:session): session closed for user root
Sep 16 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:00 nativespace-cdp sudo[2745544]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:00 nativespace-cdp sudo[2745553]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745559]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745693]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745696]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745699]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745703]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745706]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:05 nativespace-cdp sudo[2745709]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 17:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:14 nativespace-cdp sudo[2745737]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 17:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:15 nativespace-cdp sudo[2745744]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=what user-2=tstardom user-3=oubpgvbx user-4=nvihkvu user-5=havantho user-6=cath user-7=sketchy user-8=kategilpin user-9=dancinggardener user-10=stagingerris user-11=ladburyp user-12=design user-13=nove user-14=boldover user-15=crrtipdl user-16=sosevalu user-17=bakery user-18=lucy user-19=attlebor user-20=onlycont user-21=branko user-22=hodgsonmail user-23=ranxterc user-24=outdoorc user-25=romaldki user-26=tomandle user-27=jennimil user-28=mcdermos user-29=chrisdal user-30=david user-31=nbhavers user-32=careers user-33=ninejimm user-34=reliable user-35=cathski user-36=cambria1 user-37=cwsocial user-38=paulmca1 user-39=howardon user-40=pugwash user-41=hirefootballgame user-42=courseme user-43=eugincou user-44=foods user-45=leftie user-46=health2045 user-47=fortunaz user-48=nscdp user-49=putterfc
Sep 16 17:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=firstre5 user-51=steakbridieme user-52=donnychicago user-53=philmcph user-54=ctedorgu user-55=lkpier user-56=isleofwi user-57=smrszyqg user-58=barbersh user-59=tigerlet user-60=nomistakes user-61=hidden user-62=fawcettd user-63=burydropin user-64=nsceres user-65=darkstar user-66=eatspam user-67=beauty user-68=dhyana user-69=asandcoc user-70=sibtoncc user-71=zebrapho user-72=bwppodcast user-73=steve user-74=alexadmin user-75=skyfirec user-76=askhform user-77=stuartge user-78=innovat1 user-79=nativene user-80=nstriton user-81=brighto1 user-82=oneoarco user-83=battlere user-84=vivienn1 user-85=firstre2 user-86=bedfords user-87=bemadonn user-88=newstoda user-89=belle user-90=ggaaorgu user-91=elecleis user-92=gilpin user-93=milloyco user-94=fetch user-95=carsinyo user-96=putterfi user-97=hubmaster user-98=ianrayne user-99=accooper user-100=thqkgnbz user-101=connectedshoppin user-102=firstres user-103=ultbcrra
Sep 16 17:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=jonhartl user-105=seftvta user-106=opaiscyx user-107=coursemc user-108=costestimatorco user-109=clarkass user-110=firstrel user-111=highlegh user-112=southlon user-113=firstred user-114=martsblo user-115=ptkxhsbt user-116=dickemery123 user-117=hhdugcor user-118=lbhyisi user-119=magichat user-120=brmrjxl user-121=lakesan1 user-122=atestord user-123=sarafoundation user-124=strathar user-125=wilsonsw user-126=megacards user-127=musorguk user-128=jarvisin user-129=theblack user-130=hodgesonweb user-131=spectrum user-132=agproduc user-133=still user-134=leereyn1 user-135=stephani user-136=booff user-137=markward user-138=foundation user-139=lbscrmod user-140=maflemin user-141=vantagep user-142=connect9 user-143=athenare user-144=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 16 17:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 17:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:17 nativespace-cdp sudo[2745750]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 17:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:17 nativespace-cdp sudo[2745764]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WeSojsGv9fuNY2R0.~
Sep 16 17:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:17 nativespace-cdp sudo[2745767]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WeSojsGv9fuNY2R0.~'
Sep 16 17:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:17 nativespace-cdp sudo[2745770]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WeSojsGv9fuNY2R0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 17:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:17 nativespace-cdp sudo[2745774]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 17:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:17 nativespace-cdp sudo[2745777]: pam_unix(sudo:session): session closed for user root
Sep 16 17:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 17:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 17:10:22 nativespace-cdp sudo[2745809]: pam_unix(sudo:session): session closed for user root
Sep 16 17:11:33 nativespace-cdp sshd[2746094]: Connection closed by 159.100.136.21 port 51408 [preauth]
Sep 16 17:16:33 nativespace-cdp sshd[2747345]: Connection closed by 159.100.136.21 port 59012 [preauth]
Sep 16 17:21:35 nativespace-cdp sshd[2749080]: Connection closed by 159.100.136.21 port 40278 [preauth]
Sep 16 17:26:33 nativespace-cdp sshd[2750199]: Connection closed by 159.100.136.21 port 48688 [preauth]
Sep 16 17:36:33 nativespace-cdp sshd[2753121]: Connection closed by 159.100.136.21 port 37716 [preauth]
Sep 16 17:41:33 nativespace-cdp sshd[2754267]: Connection closed by 159.100.136.21 port 47172 [preauth]
Sep 16 17:46:33 nativespace-cdp sshd[2755946]: Connection closed by 159.100.136.21 port 56456 [preauth]
Sep 16 17:51:33 nativespace-cdp sshd[2757283]: Connection closed by 159.100.136.21 port 36422 [preauth]
Sep 16 17:56:33 nativespace-cdp sshd[2758594]: Connection closed by 159.100.136.21 port 46250 [preauth]
Sep 16 18:01:33 nativespace-cdp sshd[2760520]: Connection closed by 159.100.136.21 port 55672 [preauth]
Sep 16 18:06:33 nativespace-cdp sshd[2761771]: Connection closed by 159.100.136.21 port 36672 [preauth]
Sep 16 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:46 nativespace-cdp sudo[2762445]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:46 nativespace-cdp sudo[2762450]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:47 nativespace-cdp sudo[2762455]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 18:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:47 nativespace-cdp sudo[2762463]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 18:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762469]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762484]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762489]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762493]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762498]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762503]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:50 nativespace-cdp sudo[2762509]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 18:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:57 nativespace-cdp sudo[2762534]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 18:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:57 nativespace-cdp sudo[2762541]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstrel user-2=clarkass user-3=costestimatorco user-4=firstred user-5=highlegh user-6=southlon user-7=ultbcrra user-8=seftvta user-9=jonhartl user-10=firstres user-11=coursemc user-12=opaiscyx user-13=accooper user-14=ianrayne user-15=connectedshoppin user-16=thqkgnbz user-17=gilpin user-18=milloyco user-19=elecleis user-20=putterfi user-21=hubmaster user-22=fetch user-23=carsinyo user-24=bedfords user-25=newstoda user-26=ggaaorgu user-27=belle user-28=bemadonn user-29=nstriton user-30=brighto1 user-31=vivienn1 user-32=firstre2 user-33=oneoarco user-34=battlere user-35=innovat1 user-36=askhform user-37=stuartge user-38=nativene user-39=skyfirec user-40=alexadmin user-41=ulsukarm user-42=booff user-43=foundation user-44=markward user-45=vantagep user-46=connect9 user-47=athenare user-48=lbscrmod
Sep 16 18:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=maflemin user-50=agproduc user-51=still user-52=stephani user-53=leereyn1 user-54=jarvisin user-55=spectrum user-56=theblack user-57=hodgesonweb user-58=wilsonsw user-59=megacards user-60=musorguk user-61=lakesan1 user-62=brmrjxl user-63=strathar user-64=atestord user-65=sarafoundation user-66=hhdugcor user-67=lbhyisi user-68=magichat user-69=martsblo user-70=dickemery123 user-71=ptkxhsbt user-72=chrisdal user-73=mcdermos user-74=david user-75=nbhavers user-76=careers user-77=tomandle user-78=jennimil user-79=ranxterc user-80=hodgsonmail user-81=outdoorc user-82=branko user-83=romaldki user-84=lucy user-85=attlebor user-86=onlycont user-87=bakery user-88=crrtipdl user-89=sosevalu user-90=nove user-91=boldover user-92=stagingerris user-93=dancinggardener user-94=ladburyp user-95=kategilpin user-96=design user-97=tstardom user-98=oubpgvbx user-99=what user-100=havantho user-101=sketchy user-102=cath
Sep 16 18:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=nvihkvu user-104=bwppodcast user-105=zebrapho user-106=steve user-107=sibtoncc user-108=asandcoc user-109=beauty user-110=darkstar user-111=eatspam user-112=dhyana user-113=fawcettd user-114=burydropin user-115=nsceres user-116=isleofwi user-117=smrszyqg user-118=nomistakes user-119=hidden user-120=barbersh user-121=tigerlet user-122=nscdp user-123=putterfc user-124=leftie user-125=foods user-126=fortunaz user-127=health2045 user-128=lkpier user-129=donnychicago user-130=firstre5 user-131=steakbridieme user-132=philmcph user-133=ctedorgu user-134=hirefootballgame user-135=eugincou user-136=courseme user-137=cambria1 user-138=cathski user-139=ninejimm user-140=reliable user-141=cwsocial user-142=paulmca1 user-143=howardon user-144=pugwash feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 18:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 18:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:58 nativespace-cdp sudo[2762552]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:59 nativespace-cdp sudo[2762564]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NWn9C4s2XVIdgdc9.~
Sep 16 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:59 nativespace-cdp sudo[2762569]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NWn9C4s2XVIdgdc9.~'
Sep 16 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:59 nativespace-cdp sudo[2762573]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NWn9C4s2XVIdgdc9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:59 nativespace-cdp sudo[2762579]: pam_unix(sudo:session): session closed for user root
Sep 16 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:09:59 nativespace-cdp sudo[2762584]: pam_unix(sudo:session): session closed for user root
Sep 16 18:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 18:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 18:10:00 nativespace-cdp sudo[2762615]: pam_unix(sudo:session): session closed for user root
Sep 16 18:11:33 nativespace-cdp sshd[2763065]: Connection closed by 159.100.136.21 port 45786 [preauth]
Sep 16 18:16:33 nativespace-cdp sshd[2764374]: Connection closed by 159.100.136.21 port 55114 [preauth]
Sep 16 18:21:33 nativespace-cdp sshd[2765555]: Connection closed by 159.100.136.21 port 36078 [preauth]
Sep 16 18:26:34 nativespace-cdp sshd[2767155]: Connection closed by 159.100.136.21 port 45646 [preauth]
Sep 16 18:31:33 nativespace-cdp sshd[2768819]: Connection closed by 159.100.136.21 port 54970 [preauth]
Sep 16 18:36:33 nativespace-cdp sshd[2769959]: Connection closed by 159.100.136.21 port 36214 [preauth]
Sep 16 18:41:33 nativespace-cdp sshd[2771104]: Connection closed by 159.100.136.21 port 45104 [preauth]
Sep 16 18:46:33 nativespace-cdp sshd[2772847]: Connection closed by 159.100.136.21 port 54652 [preauth]
Sep 16 18:47:28 nativespace-cdp sshd[2772981]: Invalid user admin from 220.247.223.56 port 55510
Sep 16 18:47:28 nativespace-cdp sshd[2772981]: input_userauth_request: invalid user admin [preauth]
Sep 16 18:47:28 nativespace-cdp sshd[2772981]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:47:28 nativespace-cdp sshd[2772981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.247.223.56
Sep 16 18:47:30 nativespace-cdp sshd[2772981]: Failed password for invalid user admin from 220.247.223.56 port 55510 ssh2
Sep 16 18:47:30 nativespace-cdp sshd[2772981]: Received disconnect from 220.247.223.56 port 55510:11: Bye Bye [preauth]
Sep 16 18:47:30 nativespace-cdp sshd[2772981]: Disconnected from 220.247.223.56 port 55510 [preauth]
Sep 16 18:48:12 nativespace-cdp sshd[2773112]: Invalid user teamspeak from 167.172.105.64 port 42404
Sep 16 18:48:12 nativespace-cdp sshd[2773112]: input_userauth_request: invalid user teamspeak [preauth]
Sep 16 18:48:12 nativespace-cdp sshd[2773112]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:48:12 nativespace-cdp sshd[2773112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.105.64
Sep 16 18:48:14 nativespace-cdp sshd[2773112]: Failed password for invalid user teamspeak from 167.172.105.64 port 42404 ssh2
Sep 16 18:48:14 nativespace-cdp sshd[2773112]: Received disconnect from 167.172.105.64 port 42404:11: Bye Bye [preauth]
Sep 16 18:48:14 nativespace-cdp sshd[2773112]: Disconnected from 167.172.105.64 port 42404 [preauth]
Sep 16 18:48:49 nativespace-cdp sshd[2773206]: Invalid user student from 222.253.33.98 port 45880
Sep 16 18:48:49 nativespace-cdp sshd[2773206]: input_userauth_request: invalid user student [preauth]
Sep 16 18:48:49 nativespace-cdp sshd[2773206]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:48:49 nativespace-cdp sshd[2773206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.33.98
Sep 16 18:48:51 nativespace-cdp sshd[2773206]: Failed password for invalid user student from 222.253.33.98 port 45880 ssh2
Sep 16 18:48:51 nativespace-cdp sshd[2773206]: Received disconnect from 222.253.33.98 port 45880:11: Bye Bye [preauth]
Sep 16 18:48:51 nativespace-cdp sshd[2773206]: Disconnected from 222.253.33.98 port 45880 [preauth]
Sep 16 18:48:55 nativespace-cdp sshd[2773222]: Invalid user build from 156.245.5.12 port 51742
Sep 16 18:48:55 nativespace-cdp sshd[2773222]: input_userauth_request: invalid user build [preauth]
Sep 16 18:48:55 nativespace-cdp sshd[2773222]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:48:55 nativespace-cdp sshd[2773222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.245.5.12
Sep 16 18:48:56 nativespace-cdp sshd[2773222]: Failed password for invalid user build from 156.245.5.12 port 51742 ssh2
Sep 16 18:48:57 nativespace-cdp sshd[2773222]: Received disconnect from 156.245.5.12 port 51742:11: Bye Bye [preauth]
Sep 16 18:48:57 nativespace-cdp sshd[2773222]: Disconnected from 156.245.5.12 port 51742 [preauth]
Sep 16 18:49:23 nativespace-cdp sshd[2773371]: Invalid user odoo from 159.65.161.18 port 43460
Sep 16 18:49:23 nativespace-cdp sshd[2773371]: input_userauth_request: invalid user odoo [preauth]
Sep 16 18:49:23 nativespace-cdp sshd[2773371]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:49:23 nativespace-cdp sshd[2773371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.161.18
Sep 16 18:49:24 nativespace-cdp sshd[2773371]: Failed password for invalid user odoo from 159.65.161.18 port 43460 ssh2
Sep 16 18:49:25 nativespace-cdp sshd[2773371]: Received disconnect from 159.65.161.18 port 43460:11: Bye Bye [preauth]
Sep 16 18:49:25 nativespace-cdp sshd[2773371]: Disconnected from 159.65.161.18 port 43460 [preauth]
Sep 16 18:50:51 nativespace-cdp sshd[2773867]: Invalid user teamspeak1 from 200.129.17.4 port 43776
Sep 16 18:50:51 nativespace-cdp sshd[2773867]: input_userauth_request: invalid user teamspeak1 [preauth]
Sep 16 18:50:51 nativespace-cdp sshd[2773867]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:50:51 nativespace-cdp sshd[2773867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.129.17.4
Sep 16 18:50:53 nativespace-cdp sshd[2773867]: Failed password for invalid user teamspeak1 from 200.129.17.4 port 43776 ssh2
Sep 16 18:50:53 nativespace-cdp sshd[2773867]: Received disconnect from 200.129.17.4 port 43776:11: Bye Bye [preauth]
Sep 16 18:50:53 nativespace-cdp sshd[2773867]: Disconnected from 200.129.17.4 port 43776 [preauth]
Sep 16 18:51:33 nativespace-cdp sshd[2773996]: Connection closed by 159.100.136.21 port 35192 [preauth]
Sep 16 18:52:35 nativespace-cdp sshd[2774160]: Invalid user user from 54.39.18.122 port 56310
Sep 16 18:52:35 nativespace-cdp sshd[2774160]: input_userauth_request: invalid user user [preauth]
Sep 16 18:52:35 nativespace-cdp sshd[2774160]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:52:35 nativespace-cdp sshd[2774160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.18.122
Sep 16 18:52:37 nativespace-cdp sshd[2774160]: Failed password for invalid user user from 54.39.18.122 port 56310 ssh2
Sep 16 18:52:37 nativespace-cdp sshd[2774160]: Received disconnect from 54.39.18.122 port 56310:11: Bye Bye [preauth]
Sep 16 18:52:37 nativespace-cdp sshd[2774160]: Disconnected from 54.39.18.122 port 56310 [preauth]
Sep 16 18:54:49 nativespace-cdp sshd[2774646]: Invalid user adminuser from 167.172.105.64 port 48750
Sep 16 18:54:49 nativespace-cdp sshd[2774646]: input_userauth_request: invalid user adminuser [preauth]
Sep 16 18:54:49 nativespace-cdp sshd[2774646]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:54:49 nativespace-cdp sshd[2774646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.105.64
Sep 16 18:54:51 nativespace-cdp sshd[2774646]: Failed password for invalid user adminuser from 167.172.105.64 port 48750 ssh2
Sep 16 18:54:51 nativespace-cdp sshd[2774646]: Received disconnect from 167.172.105.64 port 48750:11: Bye Bye [preauth]
Sep 16 18:54:51 nativespace-cdp sshd[2774646]: Disconnected from 167.172.105.64 port 48750 [preauth]
Sep 16 18:55:13 nativespace-cdp sshd[2774814]: Invalid user user from 159.65.161.18 port 46760
Sep 16 18:55:13 nativespace-cdp sshd[2774814]: input_userauth_request: invalid user user [preauth]
Sep 16 18:55:13 nativespace-cdp sshd[2774814]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:13 nativespace-cdp sshd[2774814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.161.18
Sep 16 18:55:15 nativespace-cdp sshd[2774814]: Failed password for invalid user user from 159.65.161.18 port 46760 ssh2
Sep 16 18:55:15 nativespace-cdp sshd[2774814]: Received disconnect from 159.65.161.18 port 46760:11: Bye Bye [preauth]
Sep 16 18:55:15 nativespace-cdp sshd[2774814]: Disconnected from 159.65.161.18 port 46760 [preauth]
Sep 16 18:55:15 nativespace-cdp sshd[2774832]: Invalid user admin from 156.245.5.12 port 53596
Sep 16 18:55:15 nativespace-cdp sshd[2774832]: input_userauth_request: invalid user admin [preauth]
Sep 16 18:55:15 nativespace-cdp sshd[2774832]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:15 nativespace-cdp sshd[2774832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.245.5.12
Sep 16 18:55:18 nativespace-cdp sshd[2774832]: Failed password for invalid user admin from 156.245.5.12 port 53596 ssh2
Sep 16 18:55:18 nativespace-cdp sshd[2774832]: Received disconnect from 156.245.5.12 port 53596:11: Bye Bye [preauth]
Sep 16 18:55:18 nativespace-cdp sshd[2774832]: Disconnected from 156.245.5.12 port 53596 [preauth]
Sep 16 18:55:26 nativespace-cdp sshd[2774930]: Invalid user backup from 54.39.18.122 port 54324
Sep 16 18:55:26 nativespace-cdp sshd[2774930]: input_userauth_request: invalid user backup [preauth]
Sep 16 18:55:26 nativespace-cdp sshd[2774930]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:26 nativespace-cdp sshd[2774930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.18.122
Sep 16 18:55:28 nativespace-cdp sshd[2774930]: Failed password for invalid user backup from 54.39.18.122 port 54324 ssh2
Sep 16 18:55:29 nativespace-cdp sshd[2774930]: Received disconnect from 54.39.18.122 port 54324:11: Bye Bye [preauth]
Sep 16 18:55:29 nativespace-cdp sshd[2774930]: Disconnected from 54.39.18.122 port 54324 [preauth]
Sep 16 18:55:30 nativespace-cdp sshd[2774938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.247.223.56  user=ftp
Sep 16 18:55:30 nativespace-cdp sshd[2774938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "ftp"
Sep 16 18:55:32 nativespace-cdp sshd[2774938]: Failed password for ftp from 220.247.223.56 port 55054 ssh2
Sep 16 18:55:32 nativespace-cdp sshd[2774938]: Received disconnect from 220.247.223.56 port 55054:11: Bye Bye [preauth]
Sep 16 18:55:32 nativespace-cdp sshd[2774938]: Disconnected from 220.247.223.56 port 55054 [preauth]
Sep 16 18:55:32 nativespace-cdp sshd[2774944]: Invalid user Admin from 222.253.33.98 port 40512
Sep 16 18:55:32 nativespace-cdp sshd[2774944]: input_userauth_request: invalid user Admin [preauth]
Sep 16 18:55:32 nativespace-cdp sshd[2774944]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:32 nativespace-cdp sshd[2774944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.33.98
Sep 16 18:55:34 nativespace-cdp sshd[2774944]: Failed password for invalid user Admin from 222.253.33.98 port 40512 ssh2
Sep 16 18:55:35 nativespace-cdp sshd[2774944]: Received disconnect from 222.253.33.98 port 40512:11: Bye Bye [preauth]
Sep 16 18:55:35 nativespace-cdp sshd[2774944]: Disconnected from 222.253.33.98 port 40512 [preauth]
Sep 16 18:55:37 nativespace-cdp sshd[2774960]: Invalid user admin from 200.129.17.4 port 60830
Sep 16 18:55:37 nativespace-cdp sshd[2774960]: input_userauth_request: invalid user admin [preauth]
Sep 16 18:55:37 nativespace-cdp sshd[2774960]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:37 nativespace-cdp sshd[2774960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.129.17.4
Sep 16 18:55:38 nativespace-cdp sshd[2774960]: Failed password for invalid user admin from 200.129.17.4 port 60830 ssh2
Sep 16 18:55:38 nativespace-cdp sshd[2774960]: Received disconnect from 200.129.17.4 port 60830:11: Bye Bye [preauth]
Sep 16 18:55:38 nativespace-cdp sshd[2774960]: Disconnected from 200.129.17.4 port 60830 [preauth]
Sep 16 18:55:39 nativespace-cdp sshd[2774968]: Invalid user monitor from 167.172.105.64 port 56434
Sep 16 18:55:39 nativespace-cdp sshd[2774968]: input_userauth_request: invalid user monitor [preauth]
Sep 16 18:55:39 nativespace-cdp sshd[2774968]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:39 nativespace-cdp sshd[2774968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.105.64
Sep 16 18:55:41 nativespace-cdp sshd[2774968]: Failed password for invalid user monitor from 167.172.105.64 port 56434 ssh2
Sep 16 18:55:41 nativespace-cdp sshd[2774968]: Received disconnect from 167.172.105.64 port 56434:11: Bye Bye [preauth]
Sep 16 18:55:41 nativespace-cdp sshd[2774968]: Disconnected from 167.172.105.64 port 56434 [preauth]
Sep 16 18:55:52 nativespace-cdp sshd[2775023]: Invalid user build from 159.65.161.18 port 50860
Sep 16 18:55:52 nativespace-cdp sshd[2775023]: input_userauth_request: invalid user build [preauth]
Sep 16 18:55:52 nativespace-cdp sshd[2775023]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:52 nativespace-cdp sshd[2775023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.161.18
Sep 16 18:55:54 nativespace-cdp sshd[2775023]: Failed password for invalid user build from 159.65.161.18 port 50860 ssh2
Sep 16 18:55:54 nativespace-cdp sshd[2775054]: Invalid user teamspeak from 156.245.5.12 port 37028
Sep 16 18:55:54 nativespace-cdp sshd[2775054]: input_userauth_request: invalid user teamspeak [preauth]
Sep 16 18:55:54 nativespace-cdp sshd[2775054]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:55:54 nativespace-cdp sshd[2775054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.245.5.12
Sep 16 18:55:56 nativespace-cdp sshd[2775054]: Failed password for invalid user teamspeak from 156.245.5.12 port 37028 ssh2
Sep 16 18:55:59 nativespace-cdp sshd[2775054]: Received disconnect from 156.245.5.12 port 37028:11: Bye Bye [preauth]
Sep 16 18:55:59 nativespace-cdp sshd[2775054]: Disconnected from 156.245.5.12 port 37028 [preauth]
Sep 16 18:56:13 nativespace-cdp sshd[2775138]: Invalid user admin from 54.39.18.122 port 39112
Sep 16 18:56:13 nativespace-cdp sshd[2775138]: input_userauth_request: invalid user admin [preauth]
Sep 16 18:56:13 nativespace-cdp sshd[2775138]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:56:13 nativespace-cdp sshd[2775138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.18.122
Sep 16 18:56:15 nativespace-cdp sshd[2775138]: Failed password for invalid user admin from 54.39.18.122 port 39112 ssh2
Sep 16 18:56:15 nativespace-cdp sshd[2775138]: Received disconnect from 54.39.18.122 port 39112:11: Bye Bye [preauth]
Sep 16 18:56:15 nativespace-cdp sshd[2775138]: Disconnected from 54.39.18.122 port 39112 [preauth]
Sep 16 18:56:18 nativespace-cdp sshd[2775149]: Invalid user testuser from 220.247.223.56 port 39272
Sep 16 18:56:18 nativespace-cdp sshd[2775149]: input_userauth_request: invalid user testuser [preauth]
Sep 16 18:56:18 nativespace-cdp sshd[2775149]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:56:18 nativespace-cdp sshd[2775149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.247.223.56
Sep 16 18:56:19 nativespace-cdp sshd[2775149]: Failed password for invalid user testuser from 220.247.223.56 port 39272 ssh2
Sep 16 18:56:20 nativespace-cdp sshd[2775149]: Received disconnect from 220.247.223.56 port 39272:11: Bye Bye [preauth]
Sep 16 18:56:20 nativespace-cdp sshd[2775149]: Disconnected from 220.247.223.56 port 39272 [preauth]
Sep 16 18:56:24 nativespace-cdp sshd[2775207]: Invalid user user93 from 222.253.33.98 port 58696
Sep 16 18:56:24 nativespace-cdp sshd[2775207]: input_userauth_request: invalid user user93 [preauth]
Sep 16 18:56:24 nativespace-cdp sshd[2775207]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:56:24 nativespace-cdp sshd[2775207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.33.98
Sep 16 18:56:25 nativespace-cdp sshd[2775219]: Invalid user postgres from 200.129.17.4 port 42234
Sep 16 18:56:25 nativespace-cdp sshd[2775219]: input_userauth_request: invalid user postgres [preauth]
Sep 16 18:56:25 nativespace-cdp sshd[2775219]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 18:56:25 nativespace-cdp sshd[2775219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.129.17.4
Sep 16 18:56:26 nativespace-cdp sshd[2775207]: Failed password for invalid user user93 from 222.253.33.98 port 58696 ssh2
Sep 16 18:56:27 nativespace-cdp sshd[2775207]: Received disconnect from 222.253.33.98 port 58696:11: Bye Bye [preauth]
Sep 16 18:56:27 nativespace-cdp sshd[2775207]: Disconnected from 222.253.33.98 port 58696 [preauth]
Sep 16 18:56:28 nativespace-cdp sshd[2775219]: Failed password for invalid user postgres from 200.129.17.4 port 42234 ssh2
Sep 16 18:56:28 nativespace-cdp sshd[2775219]: Received disconnect from 200.129.17.4 port 42234:11: Bye Bye [preauth]
Sep 16 18:56:28 nativespace-cdp sshd[2775219]: Disconnected from 200.129.17.4 port 42234 [preauth]
Sep 16 18:56:33 nativespace-cdp sshd[2775314]: Connection closed by 159.100.136.21 port 45182 [preauth]
Sep 16 19:01:35 nativespace-cdp sshd[2776650]: Connection closed by 159.100.136.21 port 54490 [preauth]
Sep 16 19:06:33 nativespace-cdp sshd[2778287]: Connection closed by 159.100.136.21 port 35946 [preauth]
Sep 16 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:44 nativespace-cdp sudo[2778950]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:44 nativespace-cdp sudo[2778954]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:45 nativespace-cdp sudo[2778959]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 19:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:45 nativespace-cdp sudo[2778969]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 19:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:49 nativespace-cdp sudo[2778975]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:49 nativespace-cdp sudo[2778987]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:49 nativespace-cdp sudo[2778992]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:49 nativespace-cdp sudo[2778997]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:49 nativespace-cdp sudo[2779002]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:49 nativespace-cdp sudo[2779007]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:50 nativespace-cdp sudo[2779014]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:57 nativespace-cdp sudo[2779041]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:58 nativespace-cdp sudo[2779047]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nstriton user-2=brighto1 user-3=oneoarco user-4=battlere user-5=vivienn1 user-6=firstre2 user-7=bedfords user-8=bemadonn user-9=newstoda user-10=ggaaorgu user-11=belle user-12=skyfirec user-13=alexadmin user-14=stuartge user-15=askhform user-16=innovat1 user-17=nativene user-18=firstres user-19=ultbcrra user-20=jonhartl user-21=seftvta user-22=coursemc user-23=opaiscyx user-24=costestimatorco user-25=clarkass user-26=firstrel user-27=highlegh user-28=southlon user-29=firstred user-30=elecleis user-31=milloyco user-32=gilpin user-33=fetch user-34=carsinyo user-35=hubmaster user-36=putterfi user-37=ianrayne user-38=accooper user-39=thqkgnbz user-40=connectedshoppin user-41=lakesan1 user-42=brmrjxl user-43=atestord user-44=sarafoundation user-45=strathar user-46=wilsonsw user-47=megacards
Sep 16 19:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=musorguk user-49=martsblo user-50=ptkxhsbt user-51=dickemery123 user-52=hhdugcor user-53=lbhyisi user-54=magichat user-55=booff user-56=foundation user-57=markward user-58=lbscrmod user-59=maflemin user-60=vantagep user-61=athenare user-62=connect9 user-63=ulsukarm user-64=jarvisin user-65=hodgesonweb user-66=theblack user-67=spectrum user-68=agproduc user-69=still user-70=leereyn1 user-71=stephani user-72=nove user-73=boldover user-74=crrtipdl user-75=sosevalu user-76=bakery user-77=what user-78=tstardom user-79=oubpgvbx user-80=nvihkvu user-81=havantho user-82=sketchy user-83=cath user-84=kategilpin user-85=stagingerris user-86=dancinggardener user-87=ladburyp user-88=design user-89=tomandle user-90=jennimil user-91=mcdermos user-92=chrisdal user-93=david user-94=careers user-95=nbhavers user-96=lucy user-97=attlebor user-98=onlycont user-99=branko user-100=hodgsonmail user-101=outdoorc
Sep 16 19:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=ranxterc user-103=romaldki user-104=leftie user-105=foods user-106=fortunaz user-107=health2045 user-108=nscdp user-109=putterfc user-110=steakbridieme user-111=firstre5 user-112=donnychicago user-113=ctedorgu user-114=philmcph user-115=lkpier user-116=isleofwi user-117=smrszyqg user-118=tigerlet user-119=barbersh user-120=nomistakes user-121=hidden user-122=ninejimm user-123=reliable user-124=cathski user-125=cambria1 user-126=cwsocial user-127=paulmca1 user-128=pugwash user-129=howardon user-130=hirefootballgame user-131=courseme user-132=eugincou user-133=sibtoncc user-134=asandcoc user-135=zebrapho user-136=bwppodcast user-137=steve user-138=fawcettd user-139=burydropin user-140=nsceres user-141=darkstar user-142=eatspam user-143=beauty user-144=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 16 19:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 19:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:58 nativespace-cdp sudo[2779055]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:59 nativespace-cdp sudo[2779066]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8IHrcrEqJa6HnWHn.~
Sep 16 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:59 nativespace-cdp sudo[2779071]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8IHrcrEqJa6HnWHn.~'
Sep 16 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:59 nativespace-cdp sudo[2779075]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8IHrcrEqJa6HnWHn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:59 nativespace-cdp sudo[2779081]: pam_unix(sudo:session): session closed for user root
Sep 16 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:09:59 nativespace-cdp sudo[2779086]: pam_unix(sudo:session): session closed for user root
Sep 16 19:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 19:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 19:10:06 nativespace-cdp sudo[2779240]: pam_unix(sudo:session): session closed for user root
Sep 16 19:11:33 nativespace-cdp sshd[2779545]: Connection closed by 159.100.136.21 port 45626 [preauth]
Sep 16 19:16:36 nativespace-cdp sshd[2781103]: Connection closed by 159.100.136.21 port 54954 [preauth]
Sep 16 19:21:33 nativespace-cdp sshd[2782342]: Connection closed by 159.100.136.21 port 35198 [preauth]
Sep 16 19:26:33 nativespace-cdp sshd[2783389]: Connection closed by 159.100.136.21 port 43106 [preauth]
Sep 16 19:31:33 nativespace-cdp sshd[2784668]: Connection closed by 159.100.136.21 port 52384 [preauth]
Sep 16 19:36:33 nativespace-cdp sshd[2785985]: Connection closed by 159.100.136.21 port 33198 [preauth]
Sep 16 19:41:33 nativespace-cdp sshd[2787300]: Connection closed by 159.100.136.21 port 42284 [preauth]
Sep 16 19:46:35 nativespace-cdp sshd[2788926]: Connection closed by 159.100.136.21 port 51442 [preauth]
Sep 16 19:51:36 nativespace-cdp sshd[2790084]: Connection closed by 159.100.136.21 port 60882 [preauth]
Sep 16 19:56:34 nativespace-cdp sshd[2791110]: Connection closed by 159.100.136.21 port 41948 [preauth]
Sep 16 20:01:33 nativespace-cdp sshd[2792351]: Connection closed by 159.100.136.21 port 51574 [preauth]
Sep 16 20:06:33 nativespace-cdp sshd[2793625]: Connection closed by 159.100.136.21 port 32872 [preauth]
Sep 16 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:43 nativespace-cdp sudo[2794327]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:43 nativespace-cdp sudo[2794332]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:44 nativespace-cdp sudo[2794337]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 20:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:44 nativespace-cdp sudo[2794348]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 20:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:46 nativespace-cdp sudo[2794354]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:47 nativespace-cdp sudo[2794367]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:47 nativespace-cdp sudo[2794372]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:47 nativespace-cdp sudo[2794376]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:47 nativespace-cdp sudo[2794381]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:47 nativespace-cdp sudo[2794386]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:47 nativespace-cdp sudo[2794392]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:53 nativespace-cdp sudo[2794413]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 20:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:53 nativespace-cdp sudo[2794420]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=onlycont user-2=attlebor user-3=lucy user-4=romaldki user-5=hodgsonmail user-6=ranxterc user-7=outdoorc user-8=branko user-9=jennimil user-10=tomandle user-11=careers user-12=nbhavers user-13=david user-14=chrisdal user-15=mcdermos user-16=sketchy user-17=cath user-18=havantho user-19=nvihkvu user-20=oubpgvbx user-21=tstardom user-22=what user-23=design user-24=ladburyp user-25=dancinggardener user-26=stagingerris user-27=kategilpin user-28=boldover user-29=nove user-30=bakery user-31=sosevalu user-32=crrtipdl user-33=nsceres user-34=burydropin user-35=fawcettd user-36=dhyana user-37=beauty user-38=eatspam user-39=darkstar user-40=sibtoncc user-41=asandcoc user-42=steve user-43=bwppodcast user-44=zebrapho user-45=paulmca1 user-46=pugwash user-47=howardon user-48=cwsocial user-49=cathski
Sep 16 20:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=cambria1 user-51=ninejimm user-52=reliable user-53=eugincou user-54=courseme user-55=hirefootballgame user-56=lkpier user-57=ctedorgu user-58=philmcph user-59=donnychicago user-60=firstre5 user-61=steakbridieme user-62=putterfc user-63=nscdp user-64=health2045 user-65=fortunaz user-66=foods user-67=leftie user-68=hidden user-69=nomistakes user-70=barbersh user-71=tigerlet user-72=isleofwi user-73=smrszyqg user-74=hubmaster user-75=putterfi user-76=carsinyo user-77=fetch user-78=gilpin user-79=milloyco user-80=elecleis user-81=connectedshoppin user-82=thqkgnbz user-83=accooper user-84=ianrayne user-85=opaiscyx user-86=coursemc user-87=jonhartl user-88=seftvta user-89=ultbcrra user-90=firstres user-91=firstred user-92=southlon user-93=highlegh user-94=firstrel user-95=clarkass user-96=costestimatorco user-97=skyfirec user-98=alexadmin user-99=nativene user-100=innovat1 user-101=stuartge user-102=askhform
Sep 16 20:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=vivienn1 user-105=battlere user-106=oneoarco user-107=brighto1 user-108=nstriton user-109=belle user-110=ggaaorgu user-111=newstoda user-112=bemadonn user-113=bedfords user-114=spectrum user-115=hodgesonweb user-116=theblack user-117=jarvisin user-118=stephani user-119=leereyn1 user-120=still user-121=agproduc user-122=athenare user-123=connect9 user-124=vantagep user-125=maflemin user-126=lbscrmod user-127=booff user-128=foundation user-129=markward user-130=ulsukarm user-131=dickemery123 user-132=ptkxhsbt user-133=martsblo user-134=magichat user-135=lbhyisi user-136=hhdugcor user-137=strathar user-138=sarafoundation user-139=atestord user-140=lakesan1 user-141=brmrjxl user-142=musorguk user-143=megacards user-144=wilsonsw feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 20:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 20:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:54 nativespace-cdp sudo[2794426]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 20:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:55 nativespace-cdp sudo[2794465]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SuWWnSHzGGD8yDOr.~
Sep 16 20:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:55 nativespace-cdp sudo[2794470]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SuWWnSHzGGD8yDOr.~'
Sep 16 20:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:55 nativespace-cdp sudo[2794474]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SuWWnSHzGGD8yDOr.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 20:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:55 nativespace-cdp sudo[2794483]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 20:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:55 nativespace-cdp sudo[2794489]: pam_unix(sudo:session): session closed for user root
Sep 16 20:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 20:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 20:09:56 nativespace-cdp sudo[2794562]: pam_unix(sudo:session): session closed for user root
Sep 16 20:11:33 nativespace-cdp sshd[2794991]: Connection closed by 159.100.136.21 port 42024 [preauth]
Sep 16 20:16:33 nativespace-cdp sshd[2796508]: Connection closed by 159.100.136.21 port 51252 [preauth]
Sep 16 20:21:34 nativespace-cdp sshd[2797764]: Connection closed by 159.100.136.21 port 60078 [preauth]
Sep 16 20:26:35 nativespace-cdp sshd[2798849]: Connection closed by 159.100.136.21 port 40960 [preauth]
Sep 16 20:31:33 nativespace-cdp sshd[2800158]: Connection closed by 159.100.136.21 port 50474 [preauth]
Sep 16 20:36:34 nativespace-cdp sshd[2801637]: Connection closed by 159.100.136.21 port 60396 [preauth]
Sep 16 20:41:33 nativespace-cdp sshd[2802811]: Connection closed by 159.100.136.21 port 41166 [preauth]
Sep 16 20:46:35 nativespace-cdp sshd[2804058]: Connection closed by 159.100.136.21 port 50696 [preauth]
Sep 16 20:51:34 nativespace-cdp sshd[2805699]: Connection closed by 159.100.136.21 port 59890 [preauth]
Sep 16 20:56:33 nativespace-cdp sshd[2806884]: Connection closed by 159.100.136.21 port 41612 [preauth]
Sep 16 21:01:33 nativespace-cdp sshd[2808466]: Connection closed by 159.100.136.21 port 51210 [preauth]
Sep 16 21:06:33 nativespace-cdp sshd[2809862]: Connection closed by 159.100.136.21 port 60160 [preauth]
Sep 16 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:48 nativespace-cdp sudo[2810600]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:48 nativespace-cdp sudo[2810604]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:49 nativespace-cdp sudo[2810609]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 21:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:49 nativespace-cdp sudo[2810617]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 21:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:52 nativespace-cdp sudo[2810623]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 21:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:52 nativespace-cdp sudo[2810637]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 21:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:52 nativespace-cdp sudo[2810643]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 21:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:52 nativespace-cdp sudo[2810647]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 21:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:52 nativespace-cdp sudo[2810652]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 21:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:52 nativespace-cdp sudo[2810657]: pam_unix(sudo:session): session closed for user root
Sep 16 21:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 21:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:09:53 nativespace-cdp sudo[2810663]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:01 nativespace-cdp sudo[2810721]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 21:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:02 nativespace-cdp sudo[2810783]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=elecleis user-2=gilpin user-3=milloyco user-4=carsinyo user-5=fetch user-6=hubmaster user-7=putterfi user-8=ianrayne user-9=accooper user-10=thqkgnbz user-11=connectedshoppin user-12=firstres user-13=seftvta user-14=jonhartl user-15=ultbcrra user-16=coursemc user-17=opaiscyx user-18=costestimatorco user-19=clarkass user-20=firstrel user-21=southlon user-22=highlegh user-23=firstred user-24=skyfirec user-25=alexadmin user-26=askhform user-27=stuartge user-28=innovat1 user-29=nativene user-30=brighto1 user-31=nstriton user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=bedfords user-37=bemadonn user-38=belle user-39=ggaaorgu user-40=newstoda user-41=jarvisin user-42=hodgesonweb user-43=theblack user-44=spectrum user-45=still user-46=agproduc user-47=leereyn1
Sep 16 21:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=stephani user-49=foundation user-50=booff user-51=markward user-52=maflemin user-53=lbscrmod user-54=connect9 user-55=athenare user-56=vantagep user-57=ulsukarm user-58=martsblo user-59=ptkxhsbt user-60=dickemery123 user-61=lbhyisi user-62=hhdugcor user-63=magichat user-64=lakesan1 user-65=brmrjxl user-66=sarafoundation user-67=atestord user-68=strathar user-69=wilsonsw user-70=musorguk user-71=megacards user-72=attlebor user-73=lucy user-74=onlycont user-75=branko user-76=outdoorc user-77=ranxterc user-78=hodgsonmail user-79=romaldki user-80=tomandle user-81=jennimil user-82=mcdermos user-83=chrisdal user-84=careers user-85=nbhavers user-86=david user-87=what user-88=tstardom user-89=oubpgvbx user-90=nvihkvu user-91=cath user-92=sketchy user-93=havantho user-94=kategilpin user-95=ladburyp user-96=dancinggardener user-97=stagingerris user-98=design user-99=nove user-100=boldover user-101=sosevalu
Sep 16 21:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=bakery user-104=burydropin user-105=fawcettd user-106=nsceres user-107=eatspam user-108=darkstar user-109=beauty user-110=dhyana user-111=sibtoncc user-112=asandcoc user-113=zebrapho user-114=bwppodcast user-115=steve user-116=ninejimm user-117=reliable user-118=cathski user-119=cambria1 user-120=pugwash user-121=paulmca1 user-122=howardon user-123=cwsocial user-124=hirefootballgame user-125=courseme user-126=eugincou user-127=fortunaz user-128=health2045 user-129=foods user-130=leftie user-131=putterfc user-132=nscdp user-133=philmcph user-134=ctedorgu user-135=firstre5 user-136=steakbridieme user-137=donnychicago user-138=lkpier user-139=smrszyqg user-140=isleofwi user-141=tigerlet user-142=barbersh user-143=hidden user-144=nomistakes feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains
Sep 16 21:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) feature-8=subdomains feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 21:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:04 nativespace-cdp sudo[2810794]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 21:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:05 nativespace-cdp sudo[2810833]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5LCriLt7CBAOweFL.~
Sep 16 21:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:06 nativespace-cdp sudo[2810838]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5LCriLt7CBAOweFL.~'
Sep 16 21:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:06 nativespace-cdp sudo[2810841]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5LCriLt7CBAOweFL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 21:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:06 nativespace-cdp sudo[2810845]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 21:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:06 nativespace-cdp sudo[2810848]: pam_unix(sudo:session): session closed for user root
Sep 16 21:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 21:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:10:15 nativespace-cdp sudo[2810960]: pam_unix(sudo:session): session closed for user root
Sep 16 21:11:33 nativespace-cdp sshd[2811255]: Connection closed by 159.100.136.21 port 41026 [preauth]
Sep 16 21:16:33 nativespace-cdp sshd[2812479]: Connection closed by 159.100.136.21 port 49960 [preauth]
Sep 16 21:21:34 nativespace-cdp sshd[2814062]: Connection closed by 159.100.136.21 port 59026 [preauth]
Sep 16 21:26:33 nativespace-cdp sshd[2815136]: Connection closed by 159.100.136.21 port 40612 [preauth]
Sep 16 21:31:33 nativespace-cdp sshd[2816939]: Connection closed by 159.100.136.21 port 49880 [preauth]
Sep 16 21:36:33 nativespace-cdp sshd[2817992]: Connection closed by 159.100.136.21 port 59496 [preauth]
Sep 16 21:41:33 nativespace-cdp sshd[2819120]: Connection closed by 159.100.136.21 port 40020 [preauth]
Sep 16 21:46:33 nativespace-cdp sshd[2820279]: Connection closed by 159.100.136.21 port 49694 [preauth]
Sep 16 21:48:05 nativespace-cdp sshd[2820519]: Invalid user docker from 203.150.107.244 port 48732
Sep 16 21:48:05 nativespace-cdp sshd[2820519]: input_userauth_request: invalid user docker [preauth]
Sep 16 21:48:06 nativespace-cdp sshd[2820519]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 21:48:06 nativespace-cdp sshd[2820519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.150.107.244
Sep 16 21:48:07 nativespace-cdp sshd[2820519]: Failed password for invalid user docker from 203.150.107.244 port 48732 ssh2
Sep 16 21:48:07 nativespace-cdp sshd[2820519]: Received disconnect from 203.150.107.244 port 48732:11: Bye Bye [preauth]
Sep 16 21:48:07 nativespace-cdp sshd[2820519]: Disconnected from 203.150.107.244 port 48732 [preauth]
Sep 16 21:50:30 nativespace-cdp sshd[2821460]: Connection closed by 203.150.107.244 port 42762 [preauth]
Sep 16 21:51:18 nativespace-cdp sshd[2821923]: Invalid user admin from 203.150.107.244 port 55462
Sep 16 21:51:18 nativespace-cdp sshd[2821923]: input_userauth_request: invalid user admin [preauth]
Sep 16 21:51:18 nativespace-cdp sshd[2821923]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 21:51:18 nativespace-cdp sshd[2821923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.150.107.244
Sep 16 21:51:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 21:51:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:51:18 nativespace-cdp sudo[2821935]: pam_unix(sudo:session): session closed for user root
Sep 16 21:51:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ulsukarm
Sep 16 21:51:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:51:20 nativespace-cdp sshd[2821923]: Failed password for invalid user admin from 203.150.107.244 port 55462 ssh2
Sep 16 21:51:20 nativespace-cdp sshd[2821923]: Received disconnect from 203.150.107.244 port 55462:11: Bye Bye [preauth]
Sep 16 21:51:20 nativespace-cdp sshd[2821923]: Disconnected from 203.150.107.244 port 55462 [preauth]
Sep 16 21:51:20 nativespace-cdp sudo[2821939]: pam_unix(sudo:session): session closed for user root
Sep 16 21:51:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 21:51:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:51:22 nativespace-cdp sudo[2821961]: pam_unix(sudo:session): session closed for user root
Sep 16 21:51:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ultbcrra
Sep 16 21:51:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 21:51:22 nativespace-cdp sudo[2821965]: pam_unix(sudo:session): session closed for user root
Sep 16 21:51:33 nativespace-cdp sshd[2822005]: Connection closed by 159.100.136.21 port 58562 [preauth]
Sep 16 21:52:08 nativespace-cdp sshd[2822145]: Invalid user Git from 203.150.107.244 port 39926
Sep 16 21:52:08 nativespace-cdp sshd[2822145]: input_userauth_request: invalid user Git [preauth]
Sep 16 21:52:08 nativespace-cdp sshd[2822145]: pam_unix(sshd:auth): check pass; user unknown
Sep 16 21:52:08 nativespace-cdp sshd[2822145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.150.107.244
Sep 16 21:52:10 nativespace-cdp sshd[2822145]: Failed password for invalid user Git from 203.150.107.244 port 39926 ssh2
Sep 16 21:52:12 nativespace-cdp sshd[2822145]: Received disconnect from 203.150.107.244 port 39926:11: Bye Bye [preauth]
Sep 16 21:52:12 nativespace-cdp sshd[2822145]: Disconnected from 203.150.107.244 port 39926 [preauth]
Sep 16 21:56:33 nativespace-cdp sshd[2823258]: Connection closed by 159.100.136.21 port 39654 [preauth]
Sep 16 22:01:33 nativespace-cdp sshd[2825024]: Connection closed by 159.100.136.21 port 48366 [preauth]
Sep 16 22:06:35 nativespace-cdp sshd[2826136]: Connection closed by 159.100.136.21 port 56340 [preauth]
Sep 16 22:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 22:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:44 nativespace-cdp sudo[2826732]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 22:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:44 nativespace-cdp sudo[2826736]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 22:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:45 nativespace-cdp sudo[2826741]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:45 nativespace-cdp sudo[2826755]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:48 nativespace-cdp sudo[2826761]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:48 nativespace-cdp sudo[2826775]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:49 nativespace-cdp sudo[2826780]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:49 nativespace-cdp sudo[2826784]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:49 nativespace-cdp sudo[2826790]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:49 nativespace-cdp sudo[2826796]: pam_unix(sudo:session): session closed for user root
Sep 16 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:09:49 nativespace-cdp sudo[2826801]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:01 nativespace-cdp sudo[2826917]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 22:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:02 nativespace-cdp sudo[2826928]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hhdugcor user-2=lbhyisi user-3=magichat user-4=martsblo user-5=ptkxhsbt user-6=dickemery123 user-7=wilsonsw user-8=megacards user-9=musorguk user-10=lakesan1 user-11=brmrjxl user-12=atestord user-13=sarafoundation user-14=strathar user-15=agproduc user-16=still user-17=leereyn1 user-18=stephani user-19=jarvisin user-20=theblack user-21=hodgesonweb user-22=spectrum user-23=ulsukarm user-24=booff user-25=foundation user-26=markward user-27=lbscrmod user-28=maflemin user-29=vantagep user-30=athenare user-31=connect9 user-32=stuartge user-33=askhform user-34=innovat1 user-35=nativene user-36=skyfirec user-37=alexadmin user-38=bedfords user-39=bemadonn user-40=newstoda user-41=belle user-42=ggaaorgu user-43=nstriton user-44=brighto1 user-45=oneoarco user-46=battlere user-47=vivienn1 user-48=firstre2
Sep 16 22:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ianrayne user-50=accooper user-51=thqkgnbz user-52=connectedshoppin user-53=elecleis user-54=milloyco user-55=gilpin user-56=fetch user-57=carsinyo user-58=putterfi user-59=hubmaster user-60=costestimatorco user-61=clarkass user-62=firstrel user-63=highlegh user-64=southlon user-65=firstred user-66=firstres user-67=ultbcrra user-68=seftvta user-69=jonhartl user-70=opaiscyx user-71=coursemc user-72=hirefootballgame user-73=courseme user-74=eugincou user-75=ninejimm user-76=reliable user-77=cathski user-78=cambria1 user-79=cwsocial user-80=pugwash user-81=paulmca1 user-82=howardon user-83=isleofwi user-84=smrszyqg user-85=barbersh user-86=tigerlet user-87=nomistakes user-88=hidden user-89=leftie user-90=foods user-91=health2045 user-92=fortunaz user-93=nscdp user-94=putterfc user-95=firstre5 user-96=steakbridieme user-97=donnychicago user-98=ctedorgu user-99=philmcph user-100=lkpier user-101=darkstar
Sep 16 22:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=beauty user-104=dhyana user-105=fawcettd user-106=burydropin user-107=nsceres user-108=zebrapho user-109=bwppodcast user-110=steve user-111=sibtoncc user-112=asandcoc user-113=kategilpin user-114=dancinggardener user-115=stagingerris user-116=ladburyp user-117=design user-118=what user-119=oubpgvbx user-120=tstardom user-121=nvihkvu user-122=havantho user-123=cath user-124=sketchy user-125=crrtipdl user-126=sosevalu user-127=bakery user-128=nove user-129=boldover user-130=branko user-131=outdoorc user-132=ranxterc user-133=hodgsonmail user-134=romaldki user-135=lucy user-136=attlebor user-137=onlycont user-138=mcdermos user-139=chrisdal user-140=david user-141=careers user-142=nbhavers user-143=tomandle user-144=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 22:10:02 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 22:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:04 nativespace-cdp sudo[2826946]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 22:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:05 nativespace-cdp sudo[2826979]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-134pHvYazQzMxRY4.~
Sep 16 22:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:06 nativespace-cdp sudo[2826982]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-134pHvYazQzMxRY4.~'
Sep 16 22:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:06 nativespace-cdp sudo[2826985]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-134pHvYazQzMxRY4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 22:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:06 nativespace-cdp sudo[2826989]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 22:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:06 nativespace-cdp sudo[2826992]: pam_unix(sudo:session): session closed for user root
Sep 16 22:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 22:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 22:10:20 nativespace-cdp sudo[2827099]: pam_unix(sudo:session): session closed for user root
Sep 16 22:11:34 nativespace-cdp sshd[2827427]: Connection closed by 159.100.136.21 port 37482 [preauth]
Sep 16 22:16:33 nativespace-cdp sshd[2828881]: Connection closed by 159.100.136.21 port 47270 [preauth]
Sep 16 22:21:33 nativespace-cdp sshd[2830318]: Connection closed by 159.100.136.21 port 56766 [preauth]
Sep 16 22:26:36 nativespace-cdp sshd[2831479]: Connection closed by 159.100.136.21 port 38350 [preauth]
Sep 16 22:31:35 nativespace-cdp sshd[2832905]: Connection closed by 159.100.136.21 port 47892 [preauth]
Sep 16 22:36:33 nativespace-cdp sshd[2834193]: Connection closed by 159.100.136.21 port 57162 [preauth]
Sep 16 22:41:33 nativespace-cdp sshd[2835289]: Connection closed by 159.100.136.21 port 38416 [preauth]
Sep 16 22:46:35 nativespace-cdp sshd[2836356]: Connection closed by 159.100.136.21 port 47636 [preauth]
Sep 16 22:51:33 nativespace-cdp sshd[2837937]: Connection closed by 159.100.136.21 port 57218 [preauth]
Sep 16 22:56:33 nativespace-cdp sshd[2838995]: Connection closed by 159.100.136.21 port 38504 [preauth]
Sep 16 23:01:33 nativespace-cdp sshd[2840514]: Connection closed by 159.100.136.21 port 47878 [preauth]
Sep 16 23:06:35 nativespace-cdp sshd[2842050]: Connection closed by 159.100.136.21 port 57420 [preauth]
Sep 16 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 16 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:09:43 nativespace-cdp sudo[2842599]: pam_unix(sudo:session): session closed for user root
Sep 16 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 16 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:09:44 nativespace-cdp sudo[2842603]: pam_unix(sudo:session): session closed for user root
Sep 16 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 16 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:09:44 nativespace-cdp sudo[2842608]: pam_unix(sudo:session): session closed for user root
Sep 16 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 16 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:09:44 nativespace-cdp sudo[2842615]: pam_unix(sudo:session): session closed for user root
Sep 16 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 16 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:01 nativespace-cdp sudo[2842621]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 16 23:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:01 nativespace-cdp sudo[2842783]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 16 23:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:02 nativespace-cdp sudo[2842788]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 16 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:02 nativespace-cdp sudo[2842792]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 16 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:02 nativespace-cdp sudo[2842795]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 16 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:02 nativespace-cdp sudo[2842817]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 16 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:02 nativespace-cdp sudo[2842827]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 16 23:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:05 nativespace-cdp sudo[2842852]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 16 23:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:05 nativespace-cdp sudo[2842857]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=leftie user-2=foods user-3=fortunaz user-4=health2045 user-5=nscdp user-6=putterfc user-7=firstre5 user-8=steakbridieme user-9=donnychicago user-10=ctedorgu user-11=philmcph user-12=lkpier user-13=isleofwi user-14=smrszyqg user-15=tigerlet user-16=barbersh user-17=nomistakes user-18=hidden user-19=reliable user-20=ninejimm user-21=cathski user-22=cambria1 user-23=cwsocial user-24=paulmca1 user-25=howardon user-26=pugwash user-27=hirefootballgame user-28=courseme user-29=eugincou user-30=sibtoncc user-31=asandcoc user-32=zebrapho user-33=bwppodcast user-34=steve user-35=fawcettd user-36=burydropin user-37=nsceres user-38=darkstar user-39=eatspam user-40=beauty user-41=dhyana user-42=nove user-43=boldover user-44=crrtipdl user-45=sosevalu user-46=bakery user-47=what user-48=tstardom
Sep 16 23:10:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=oubpgvbx user-50=nvihkvu user-51=havantho user-52=cath user-53=sketchy user-54=kategilpin user-55=stagingerris user-56=dancinggardener user-57=ladburyp user-58=design user-59=tomandle user-60=jennimil user-61=mcdermos user-62=chrisdal user-63=david user-64=careers user-65=nbhavers user-66=lucy user-67=attlebor user-68=onlycont user-69=branko user-70=hodgsonmail user-71=ranxterc user-72=outdoorc user-73=romaldki user-74=lakesan1 user-75=brmrjxl user-76=atestord user-77=sarafoundation user-78=strathar user-79=wilsonsw user-80=megacards user-81=musorguk user-82=martsblo user-83=ptkxhsbt user-84=dickemery123 user-85=hhdugcor user-86=lbhyisi user-87=magichat user-88=foundation user-89=booff user-90=markward user-91=lbscrmod user-92=maflemin user-93=vantagep user-94=connect9 user-95=athenare user-96=ulsukarm user-97=jarvisin user-98=theblack user-99=hodgesonweb user-100=spectrum user-101=agproduc user-102=still
Sep 16 23:10:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=leereyn1 user-104=stephani user-105=nstriton user-106=brighto1 user-107=oneoarco user-108=battlere user-109=vivienn1 user-110=firstre2 user-111=bedfords user-112=bemadonn user-113=newstoda user-114=ggaaorgu user-115=belle user-116=alexadmin user-117=skyfirec user-118=stuartge user-119=askhform user-120=innovat1 user-121=nativene user-122=firstres user-123=ultbcrra user-124=seftvta user-125=jonhartl user-126=coursemc user-127=opaiscyx user-128=costestimatorco user-129=clarkass user-130=firstrel user-131=highlegh user-132=southlon user-133=firstred user-134=elecleis user-135=milloyco user-136=gilpin user-137=fetch user-138=carsinyo user-139=hubmaster user-140=putterfi user-141=ianrayne user-142=accooper user-143=thqkgnbz user-144=connectedshoppin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 16 23:10:05 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 16 23:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:06 nativespace-cdp sudo[2842862]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 23:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:07 nativespace-cdp sudo[2842868]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-u92kpevu2IjD1A7L.~
Sep 16 23:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:07 nativespace-cdp sudo[2842871]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-u92kpevu2IjD1A7L.~'
Sep 16 23:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:07 nativespace-cdp sudo[2842874]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-u92kpevu2IjD1A7L.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 16 23:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:07 nativespace-cdp sudo[2842878]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 16 23:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:07 nativespace-cdp sudo[2842881]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 16 23:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:13 nativespace-cdp sudo[2842884]: pam_unix(sudo:session): session closed for user root
Sep 16 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 16 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 16 23:10:14 nativespace-cdp sudo[2842924]: pam_unix(sudo:session): session closed for user root
Sep 16 23:11:33 nativespace-cdp sshd[2843276]: Connection closed by 159.100.136.21 port 38332 [preauth]
Sep 16 23:16:33 nativespace-cdp sshd[2844916]: Connection closed by 159.100.136.21 port 47498 [preauth]
Sep 16 23:21:33 nativespace-cdp sshd[2846078]: Connection closed by 159.100.136.21 port 55796 [preauth]
Sep 16 23:26:33 nativespace-cdp sshd[2847251]: Connection closed by 159.100.136.21 port 37050 [preauth]
Sep 16 23:31:33 nativespace-cdp sshd[2848756]: Connection closed by 159.100.136.21 port 46652 [preauth]
Sep 16 23:36:33 nativespace-cdp sshd[2850235]: Connection closed by 159.100.136.21 port 55792 [preauth]
Sep 16 23:41:34 nativespace-cdp sshd[2851324]: Connection closed by 159.100.136.21 port 36500 [preauth]
Sep 16 23:46:36 nativespace-cdp sshd[2852616]: Connection closed by 159.100.136.21 port 45182 [preauth]
Sep 16 23:51:36 nativespace-cdp sshd[2854249]: Connection closed by 159.100.136.21 port 54354 [preauth]
Sep 16 23:56:33 nativespace-cdp sshd[2855252]: Connection closed by 159.100.136.21 port 35768 [preauth]
Sep 17 00:01:34 nativespace-cdp sshd[2856682]: Connection closed by 159.100.136.21 port 45266 [preauth]
Sep 17 00:06:33 nativespace-cdp sshd[2857952]: Connection closed by 159.100.136.21 port 54564 [preauth]
Sep 17 00:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 00:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:44 nativespace-cdp sudo[2858610]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 00:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:44 nativespace-cdp sudo[2858614]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 00:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:45 nativespace-cdp sudo[2858619]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 00:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:45 nativespace-cdp sudo[2858626]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 00:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858632]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 00:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858651]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 00:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858656]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 00:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858660]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 00:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858665]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 00:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858670]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 00:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:48 nativespace-cdp sudo[2858676]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 00:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:50 nativespace-cdp sudo[2858687]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 00:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:50 nativespace-cdp sudo[2858695]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstred user-2=southlon user-3=highlegh user-4=firstrel user-5=clarkass user-6=costestimatorco user-7=opaiscyx user-8=coursemc user-9=jonhartl user-10=seftvta user-11=ultbcrra user-12=firstres user-13=connectedshoppin user-14=thqkgnbz user-15=accooper user-16=ianrayne user-17=putterfi user-18=hubmaster user-19=carsinyo user-20=fetch user-21=gilpin user-22=milloyco user-23=elecleis user-24=belle user-25=ggaaorgu user-26=newstoda user-27=bemadonn user-28=bedfords user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=nativene user-36=innovat1 user-37=askhform user-38=stuartge user-39=alexadmin user-40=skyfirec user-41=ulsukarm user-42=connect9 user-43=athenare user-44=vantagep user-45=maflemin user-46=lbscrmod user-47=booff user-48=foundation
Sep 17 00:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=markward user-50=stephani user-51=leereyn1 user-52=still user-53=agproduc user-54=spectrum user-55=hodgesonweb user-56=theblack user-57=jarvisin user-58=musorguk user-59=megacards user-60=wilsonsw user-61=strathar user-62=sarafoundation user-63=atestord user-64=brmrjxl user-65=lakesan1 user-66=magichat user-67=lbhyisi user-68=hhdugcor user-69=dickemery123 user-70=ptkxhsbt user-71=martsblo user-72=careers user-73=nbhavers user-74=david user-75=chrisdal user-76=mcdermos user-77=jennimil user-78=tomandle user-79=romaldki user-80=outdoorc user-81=ranxterc user-82=hodgsonmail user-83=branko user-84=onlycont user-85=attlebor user-86=lucy user-87=bakery user-88=sosevalu user-89=crrtipdl user-90=boldover user-91=nove user-92=design user-93=ladburyp user-94=dancinggardener user-95=stagingerris user-96=kategilpin user-97=sketchy user-98=cath user-99=havantho user-100=nvihkvu user-101=tstardom user-102=oubpgvbx
Sep 17 00:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=what user-104=steve user-105=bwppodcast user-106=zebrapho user-107=sibtoncc user-108=asandcoc user-109=dhyana user-110=beauty user-111=eatspam user-112=darkstar user-113=nsceres user-114=burydropin user-115=fawcettd user-116=hidden user-117=nomistakes user-118=tigerlet user-119=barbersh user-120=isleofwi user-121=smrszyqg user-122=lkpier user-123=philmcph user-124=ctedorgu user-125=firstre5 user-126=donnychicago user-127=steakbridieme user-128=putterfc user-129=nscdp user-130=fortunaz user-131=health2045 user-132=leftie user-133=foods user-134=eugincou user-135=courseme user-136=hirefootballgame user-137=howardon user-138=paulmca1 user-139=pugwash user-140=cwsocial user-141=cambria1 user-142=cathski user-143=reliable user-144=ninejimm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 00:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 00:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:51 nativespace-cdp sudo[2858702]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 00:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:51 nativespace-cdp sudo[2858714]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Nsf923Af2wjkFVc3.~
Sep 17 00:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:51 nativespace-cdp sudo[2858719]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Nsf923Af2wjkFVc3.~'
Sep 17 00:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:51 nativespace-cdp sudo[2858723]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Nsf923Af2wjkFVc3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 00:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:51 nativespace-cdp sudo[2858730]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 00:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:52 nativespace-cdp sudo[2858735]: pam_unix(sudo:session): session closed for user root
Sep 17 00:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 17 00:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 00:09:59 nativespace-cdp sudo[2858767]: pam_unix(sudo:session): session closed for user root
Sep 17 00:11:33 nativespace-cdp sshd[2859478]: Connection closed by 159.100.136.21 port 35658 [preauth]
Sep 17 00:16:36 nativespace-cdp sshd[2860956]: Connection closed by 159.100.136.21 port 45160 [preauth]
Sep 17 00:21:35 nativespace-cdp sshd[2862165]: Connection closed by 159.100.136.21 port 54088 [preauth]
Sep 17 00:26:33 nativespace-cdp sshd[2863637]: Connection closed by 159.100.136.21 port 35564 [preauth]
Sep 17 00:31:33 nativespace-cdp sshd[2865362]: Connection closed by 159.100.136.21 port 44890 [preauth]
Sep 17 00:36:34 nativespace-cdp sshd[2866454]: Connection closed by 159.100.136.21 port 54206 [preauth]
Sep 17 00:41:33 nativespace-cdp sshd[2867586]: Connection closed by 159.100.136.21 port 35086 [preauth]
Sep 17 00:46:33 nativespace-cdp sshd[2869220]: Connection closed by 159.100.136.21 port 44368 [preauth]
Sep 17 00:51:36 nativespace-cdp sshd[2870281]: Connection closed by 159.100.136.21 port 53586 [preauth]
Sep 17 00:56:34 nativespace-cdp sshd[2871175]: Connection closed by 159.100.136.21 port 34768 [preauth]
Sep 17 01:01:33 nativespace-cdp sshd[2872562]: Connection closed by 159.100.136.21 port 43000 [preauth]
Sep 17 01:06:34 nativespace-cdp sshd[2873764]: Connection closed by 159.100.136.21 port 52612 [preauth]
Sep 17 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:34 nativespace-cdp sudo[2874447]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:34 nativespace-cdp sudo[2874450]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:36 nativespace-cdp sudo[2874453]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 01:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:36 nativespace-cdp sudo[2874460]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 01:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874464]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874499]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874502]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874506]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874511]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874514]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:40 nativespace-cdp sudo[2874521]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:42 nativespace-cdp sudo[2874594]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:44 nativespace-cdp sudo[2874612]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=opaiscyx user-2=coursemc user-3=firstres user-4=ultbcrra user-5=seftvta user-6=jonhartl user-7=highlegh user-8=southlon user-9=firstred user-10=costestimatorco user-11=firstrel user-12=clarkass user-13=fetch user-14=carsinyo user-15=hubmaster user-16=putterfi user-17=elecleis user-18=gilpin user-19=milloyco user-20=thqkgnbz user-21=connectedshoppin user-22=ianrayne user-23=accooper user-24=oneoarco user-25=battlere user-26=vivienn1 user-27=firstre2 user-28=nstriton user-29=brighto1 user-30=bemadonn user-31=newstoda user-32=ggaaorgu user-33=belle user-34=bedfords user-35=alexadmin user-36=skyfirec user-37=nativene user-38=askhform user-39=stuartge user-40=innovat1 user-41=lbscrmod user-42=maflemin user-43=vantagep user-44=athenare user-45=connect9 user-46=markward user-47=booff user-48=foundation
Sep 17 01:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ulsukarm user-50=theblack user-51=hodgesonweb user-52=spectrum user-53=jarvisin user-54=leereyn1 user-55=stephani user-56=agproduc user-57=still user-58=atestord user-59=sarafoundation user-60=strathar user-61=brmrjxl user-62=lakesan1 user-63=megacards user-64=musorguk user-65=wilsonsw user-66=ptkxhsbt user-67=dickemery123 user-68=martsblo user-69=magichat user-70=hhdugcor user-71=lbhyisi user-72=jennimil user-73=tomandle user-74=david user-75=nbhavers user-76=careers user-77=mcdermos user-78=chrisdal user-79=onlycont user-80=lucy user-81=attlebor user-82=romaldki user-83=branko user-84=ranxterc user-85=hodgsonmail user-86=outdoorc user-87=boldover user-88=nove user-89=crrtipdl user-90=sosevalu user-91=bakery user-92=nvihkvu user-93=havantho user-94=cath user-95=sketchy user-96=what user-97=oubpgvbx user-98=tstardom user-99=design user-100=kategilpin user-101=stagingerris user-102=dancinggardener
Sep 17 01:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ladburyp user-104=sibtoncc user-105=asandcoc user-106=steve user-107=zebrapho user-108=bwppodcast user-109=nsceres user-110=fawcettd user-111=burydropin user-112=dhyana user-113=darkstar user-114=eatspam user-115=beauty user-116=steakbridieme user-117=firstre5 user-118=donnychicago user-119=ctedorgu user-120=philmcph user-121=lkpier user-122=foods user-123=leftie user-124=fortunaz user-125=health2045 user-126=nscdp user-127=putterfc user-128=tigerlet user-129=barbersh user-130=nomistakes user-131=hidden user-132=isleofwi user-133=smrszyqg user-134=cwsocial user-135=paulmca1 user-136=howardon user-137=pugwash user-138=reliable user-139=ninejimm user-140=cathski user-141=cambria1 user-142=courseme user-143=eugincou user-144=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 01:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 01:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:45 nativespace-cdp sudo[2874684]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 01:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:46 nativespace-cdp sudo[2874709]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3mjp5B0bEOSInYld.~
Sep 17 01:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:46 nativespace-cdp sudo[2874712]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3mjp5B0bEOSInYld.~'
Sep 17 01:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:46 nativespace-cdp sudo[2874715]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3mjp5B0bEOSInYld.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 01:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:46 nativespace-cdp sudo[2874719]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 01:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:46 nativespace-cdp sudo[2874722]: pam_unix(sudo:session): session closed for user root
Sep 17 01:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 17 01:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 01:09:53 nativespace-cdp sudo[2874849]: pam_unix(sudo:session): session closed for user root
Sep 17 01:11:36 nativespace-cdp sshd[2875392]: Connection closed by 159.100.136.21 port 33786 [preauth]
Sep 17 01:16:33 nativespace-cdp sshd[2876936]: Connection closed by 159.100.136.21 port 43266 [preauth]
Sep 17 01:21:35 nativespace-cdp sshd[2877996]: Connection closed by 159.100.136.21 port 51992 [preauth]
Sep 17 01:26:33 nativespace-cdp sshd[2879016]: Connection closed by 159.100.136.21 port 32770 [preauth]
Sep 17 01:31:33 nativespace-cdp sshd[2880176]: Connection closed by 159.100.136.21 port 42466 [preauth]
Sep 17 01:36:34 nativespace-cdp sshd[2881662]: Connection closed by 159.100.136.21 port 52254 [preauth]
Sep 17 01:41:33 nativespace-cdp sshd[2882814]: Connection closed by 159.100.136.21 port 60528 [preauth]
Sep 17 01:46:34 nativespace-cdp sshd[2884338]: Connection closed by 159.100.136.21 port 41672 [preauth]
Sep 17 01:51:35 nativespace-cdp sshd[2885524]: Connection closed by 159.100.136.21 port 50524 [preauth]
Sep 17 01:56:33 nativespace-cdp sshd[2886647]: Connection closed by 159.100.136.21 port 59854 [preauth]
Sep 17 02:01:33 nativespace-cdp sshd[2887923]: Connection closed by 159.100.136.21 port 40704 [preauth]
Sep 17 02:02:50 nativespace-cdp sshd[2888249]: Invalid user admin from 92.222.181.145 port 54476
Sep 17 02:02:50 nativespace-cdp sshd[2888249]: input_userauth_request: invalid user admin [preauth]
Sep 17 02:02:50 nativespace-cdp sshd[2888249]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:02:50 nativespace-cdp sshd[2888249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.181.145
Sep 17 02:02:52 nativespace-cdp sshd[2888249]: Failed password for invalid user admin from 92.222.181.145 port 54476 ssh2
Sep 17 02:02:52 nativespace-cdp sshd[2888249]: Received disconnect from 92.222.181.145 port 54476:11: Bye Bye [preauth]
Sep 17 02:02:52 nativespace-cdp sshd[2888249]: Disconnected from 92.222.181.145 port 54476 [preauth]
Sep 17 02:03:20 nativespace-cdp sshd[2888335]: Invalid user jason from 132.148.165.220 port 54888
Sep 17 02:03:20 nativespace-cdp sshd[2888335]: input_userauth_request: invalid user jason [preauth]
Sep 17 02:03:20 nativespace-cdp sshd[2888335]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:03:20 nativespace-cdp sshd[2888335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.165.220
Sep 17 02:03:22 nativespace-cdp sshd[2888335]: Failed password for invalid user jason from 132.148.165.220 port 54888 ssh2
Sep 17 02:03:22 nativespace-cdp sshd[2888335]: Received disconnect from 132.148.165.220 port 54888:11: Bye Bye [preauth]
Sep 17 02:03:22 nativespace-cdp sshd[2888335]: Disconnected from 132.148.165.220 port 54888 [preauth]
Sep 17 02:06:33 nativespace-cdp sshd[2889017]: Connection closed by 159.100.136.21 port 50282 [preauth]
Sep 17 02:08:50 nativespace-cdp sshd[2889490]: Invalid user backup from 172.235.58.57 port 41372
Sep 17 02:08:50 nativespace-cdp sshd[2889490]: input_userauth_request: invalid user backup [preauth]
Sep 17 02:08:50 nativespace-cdp sshd[2889490]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:08:50 nativespace-cdp sshd[2889490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.235.58.57
Sep 17 02:08:52 nativespace-cdp sshd[2889490]: Failed password for invalid user backup from 172.235.58.57 port 41372 ssh2
Sep 17 02:08:52 nativespace-cdp sshd[2889490]: Received disconnect from 172.235.58.57 port 41372:11: Bye Bye [preauth]
Sep 17 02:08:52 nativespace-cdp sshd[2889490]: Disconnected from 172.235.58.57 port 41372 [preauth]
Sep 17 02:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 02:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:28 nativespace-cdp sudo[2889640]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 02:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:28 nativespace-cdp sudo[2889643]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 02:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:29 nativespace-cdp sudo[2889646]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:29 nativespace-cdp sudo[2889651]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889654]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889674]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889677]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889680]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889684]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889687]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:33 nativespace-cdp sudo[2889690]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 02:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:35 nativespace-cdp sudo[2889700]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 02:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:35 nativespace-cdp sudo[2889705]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=lbhyisi user-3=hhdugcor user-4=ptkxhsbt user-5=dickemery123 user-6=martsblo user-7=musorguk user-8=megacards user-9=wilsonsw user-10=sarafoundation user-11=atestord user-12=strathar user-13=lakesan1 user-14=brmrjxl user-15=leereyn1 user-16=stephani user-17=still user-18=agproduc user-19=hodgesonweb user-20=theblack user-21=spectrum user-22=jarvisin user-23=ulsukarm user-24=maflemin user-25=lbscrmod user-26=connect9 user-27=athenare user-28=vantagep user-29=booff user-30=foundation user-31=markward user-32=nativene user-33=askhform user-34=stuartge user-35=innovat1 user-36=skyfirec user-37=alexadmin user-38=bemadonn user-39=ggaaorgu user-40=belle user-41=newstoda user-42=bedfords user-43=battlere user-44=oneoarco user-45=firstre2 user-46=vivienn1 user-47=brighto1 user-48=nstriton
Sep 17 02:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=thqkgnbz user-50=connectedshoppin user-51=ianrayne user-52=accooper user-53=carsinyo user-54=fetch user-55=hubmaster user-56=putterfi user-57=elecleis user-58=milloyco user-59=gilpin user-60=southlon user-61=highlegh user-62=firstred user-63=costestimatorco user-64=firstrel user-65=clarkass user-66=opaiscyx user-67=coursemc user-68=firstres user-69=seftvta user-70=jonhartl user-71=ultbcrra user-72=courseme user-73=eugincou user-74=hirefootballgame user-75=paulmca1 user-76=pugwash user-77=howardon user-78=cwsocial user-79=reliable user-80=ninejimm user-81=cambria1 user-82=cathski user-83=barbersh user-84=tigerlet user-85=hidden user-86=nomistakes user-87=smrszyqg user-88=isleofwi user-89=ctedorgu user-90=philmcph user-91=steakbridieme user-92=firstre5 user-93=donnychicago user-94=lkpier user-95=fortunaz user-96=health2045 user-97=foods user-98=leftie user-99=putterfc user-100=nscdp user-101=dhyana
Sep 17 02:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=darkstar user-104=beauty user-105=nsceres user-106=burydropin user-107=fawcettd user-108=steve user-109=zebrapho user-110=bwppodcast user-111=sibtoncc user-112=asandcoc user-113=design user-114=kategilpin user-115=ladburyp user-116=stagingerris user-117=dancinggardener user-118=nvihkvu user-119=cath user-120=sketchy user-121=havantho user-122=what user-123=oubpgvbx user-124=tstardom user-125=sosevalu user-126=crrtipdl user-127=bakery user-128=boldover user-129=nove user-130=romaldki user-131=branko user-132=outdoorc user-133=ranxterc user-134=hodgsonmail user-135=onlycont user-136=attlebor user-137=lucy user-138=nbhavers user-139=careers user-140=david user-141=mcdermos user-142=chrisdal user-143=jennimil user-144=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 02:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 02:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:36 nativespace-cdp sudo[2889710]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:36 nativespace-cdp sudo[2889714]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wOTmmNp6BtGcpzea.~
Sep 17 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:36 nativespace-cdp sudo[2889718]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wOTmmNp6BtGcpzea.~'
Sep 17 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:36 nativespace-cdp sudo[2889721]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wOTmmNp6BtGcpzea.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:36 nativespace-cdp sudo[2889725]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:36 nativespace-cdp sudo[2889728]: pam_unix(sudo:session): session closed for user root
Sep 17 02:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 17 02:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:09:50 nativespace-cdp sudo[2889779]: pam_unix(sudo:session): session closed for user root
Sep 17 02:10:22 nativespace-cdp sshd[2890284]: Invalid user test from 92.222.181.145 port 53918
Sep 17 02:10:22 nativespace-cdp sshd[2890284]: input_userauth_request: invalid user test [preauth]
Sep 17 02:10:22 nativespace-cdp sshd[2890284]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:10:22 nativespace-cdp sshd[2890284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.181.145
Sep 17 02:10:24 nativespace-cdp sshd[2890284]: Failed password for invalid user test from 92.222.181.145 port 53918 ssh2
Sep 17 02:10:24 nativespace-cdp sshd[2890284]: Received disconnect from 92.222.181.145 port 53918:11: Bye Bye [preauth]
Sep 17 02:10:24 nativespace-cdp sshd[2890284]: Disconnected from 92.222.181.145 port 53918 [preauth]
Sep 17 02:10:25 nativespace-cdp sshd[2890289]: Invalid user demo from 132.148.165.220 port 50656
Sep 17 02:10:25 nativespace-cdp sshd[2890289]: input_userauth_request: invalid user demo [preauth]
Sep 17 02:10:25 nativespace-cdp sshd[2890289]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:10:25 nativespace-cdp sshd[2890289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.165.220
Sep 17 02:10:27 nativespace-cdp sshd[2890289]: Failed password for invalid user demo from 132.148.165.220 port 50656 ssh2
Sep 17 02:10:27 nativespace-cdp sshd[2890289]: Received disconnect from 132.148.165.220 port 50656:11: Bye Bye [preauth]
Sep 17 02:10:27 nativespace-cdp sshd[2890289]: Disconnected from 132.148.165.220 port 50656 [preauth]
Sep 17 02:11:06 nativespace-cdp sshd[2890434]: Invalid user teamspeak from 92.222.181.145 port 43630
Sep 17 02:11:06 nativespace-cdp sshd[2890434]: input_userauth_request: invalid user teamspeak [preauth]
Sep 17 02:11:06 nativespace-cdp sshd[2890434]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:11:06 nativespace-cdp sshd[2890434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.181.145
Sep 17 02:11:07 nativespace-cdp sshd[2890430]: Invalid user test from 172.235.58.57 port 33580
Sep 17 02:11:07 nativespace-cdp sshd[2890430]: input_userauth_request: invalid user test [preauth]
Sep 17 02:11:07 nativespace-cdp sshd[2890430]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:11:07 nativespace-cdp sshd[2890430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.235.58.57
Sep 17 02:11:08 nativespace-cdp sshd[2890458]: Invalid user ubuntu from 132.148.165.220 port 35300
Sep 17 02:11:08 nativespace-cdp sshd[2890458]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 02:11:08 nativespace-cdp sshd[2890458]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:11:08 nativespace-cdp sshd[2890458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.165.220
Sep 17 02:11:09 nativespace-cdp sshd[2890434]: Failed password for invalid user teamspeak from 92.222.181.145 port 43630 ssh2
Sep 17 02:11:09 nativespace-cdp sshd[2890430]: Failed password for invalid user test from 172.235.58.57 port 33580 ssh2
Sep 17 02:11:09 nativespace-cdp sshd[2890430]: Received disconnect from 172.235.58.57 port 33580:11: Bye Bye [preauth]
Sep 17 02:11:09 nativespace-cdp sshd[2890430]: Disconnected from 172.235.58.57 port 33580 [preauth]
Sep 17 02:11:10 nativespace-cdp sshd[2890458]: Failed password for invalid user ubuntu from 132.148.165.220 port 35300 ssh2
Sep 17 02:11:13 nativespace-cdp sshd[2890458]: Received disconnect from 132.148.165.220 port 35300:11: Bye Bye [preauth]
Sep 17 02:11:13 nativespace-cdp sshd[2890458]: Disconnected from 132.148.165.220 port 35300 [preauth]
Sep 17 02:11:33 nativespace-cdp sshd[2890552]: Connection closed by 159.100.136.21 port 59508 [preauth]
Sep 17 02:11:46 nativespace-cdp sshd[2890574]: Invalid user user from 172.235.58.57 port 39270
Sep 17 02:11:46 nativespace-cdp sshd[2890574]: input_userauth_request: invalid user user [preauth]
Sep 17 02:11:46 nativespace-cdp sshd[2890574]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 02:11:46 nativespace-cdp sshd[2890574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.235.58.57
Sep 17 02:11:48 nativespace-cdp sshd[2890574]: Failed password for invalid user user from 172.235.58.57 port 39270 ssh2
Sep 17 02:16:33 nativespace-cdp sshd[2892283]: Connection closed by 159.100.136.21 port 40620 [preauth]
Sep 17 02:20:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 02:20:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 02:20:03 nativespace-cdp sudo[2893195]: pam_unix(sudo:session): session closed for user root
Sep 17 02:21:36 nativespace-cdp sshd[2893542]: Connection closed by 159.100.136.21 port 49948 [preauth]
Sep 17 02:26:36 nativespace-cdp sshd[2894595]: Connection closed by 159.100.136.21 port 59782 [preauth]
Sep 17 02:31:34 nativespace-cdp sshd[2895741]: Connection closed by 159.100.136.21 port 40780 [preauth]
Sep 17 02:36:34 nativespace-cdp sshd[2897073]: Connection closed by 159.100.136.21 port 49940 [preauth]
Sep 17 02:41:33 nativespace-cdp sshd[2898416]: Connection closed by 159.100.136.21 port 59094 [preauth]
Sep 17 02:46:33 nativespace-cdp sshd[2899609]: Connection closed by 159.100.136.21 port 39448 [preauth]
Sep 17 02:51:33 nativespace-cdp sshd[2901007]: Connection closed by 159.100.136.21 port 48968 [preauth]
Sep 17 02:56:33 nativespace-cdp sshd[2902085]: Connection closed by 159.100.136.21 port 57308 [preauth]
Sep 17 03:01:34 nativespace-cdp sshd[2903332]: Connection closed by 159.100.136.21 port 35304 [preauth]
Sep 17 03:06:33 nativespace-cdp sshd[2904684]: Connection closed by 159.100.136.21 port 44974 [preauth]
Sep 17 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:33 nativespace-cdp sudo[2905482]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:33 nativespace-cdp sudo[2905486]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:34 nativespace-cdp sudo[2905489]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 03:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:34 nativespace-cdp sudo[2905493]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 03:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905497]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905513]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905516]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905519]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905522]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905525]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:37 nativespace-cdp sudo[2905529]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:45 nativespace-cdp sudo[2905566]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:46 nativespace-cdp sudo[2905582]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tstardom user-2=oubpgvbx user-3=what user-4=havantho user-5=cath user-6=sketchy user-7=nvihkvu user-8=dancinggardener user-9=stagingerris user-10=ladburyp user-11=kategilpin user-12=design user-13=nove user-14=boldover user-15=bakery user-16=crrtipdl user-17=sosevalu user-18=lucy user-19=attlebor user-20=onlycont user-21=hodgsonmail user-22=ranxterc user-23=outdoorc user-24=branko user-25=romaldki user-26=tomandle user-27=jennimil user-28=chrisdal user-29=mcdermos user-30=david user-31=nbhavers user-32=careers user-33=cathski user-34=cambria1 user-35=ninejimm user-36=reliable user-37=cwsocial user-38=paulmca1 user-39=howardon user-40=pugwash user-41=hirefootballgame user-42=eugincou user-43=courseme user-44=nscdp user-45=putterfc user-46=foods user-47=leftie user-48=fortunaz user-49=health2045
Sep 17 03:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=lkpier user-51=firstre5 user-52=steakbridieme user-53=donnychicago user-54=philmcph user-55=ctedorgu user-56=isleofwi user-57=smrszyqg user-58=nomistakes user-59=hidden user-60=barbersh user-61=tigerlet user-62=fawcettd user-63=burydropin user-64=nsceres user-65=beauty user-66=darkstar user-67=eatspam user-68=dhyana user-69=sibtoncc user-70=asandcoc user-71=bwppodcast user-72=zebrapho user-73=steve user-74=alexadmin user-75=skyfirec user-76=innovat1 user-77=stuartge user-78=askhform user-79=nativene user-80=nstriton user-81=brighto1 user-82=vivienn1 user-83=firstre2 user-84=oneoarco user-85=battlere user-86=bedfords user-87=newstoda user-88=ggaaorgu user-89=belle user-90=bemadonn user-91=gilpin user-92=milloyco user-93=elecleis user-94=hubmaster user-95=putterfi user-96=fetch user-97=carsinyo user-98=accooper user-99=ianrayne user-100=connectedshoppin user-101=thqkgnbz user-102=ultbcrra user-103=seftvta
Sep 17 03:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=jonhartl user-105=firstres user-106=coursemc user-107=opaiscyx user-108=firstrel user-109=clarkass user-110=costestimatorco user-111=firstred user-112=highlegh user-113=southlon user-114=martsblo user-115=dickemery123 user-116=ptkxhsbt user-117=hhdugcor user-118=lbhyisi user-119=magichat user-120=brmrjxl user-121=lakesan1 user-122=strathar user-123=atestord user-124=sarafoundation user-125=wilsonsw user-126=megacards user-127=musorguk user-128=jarvisin user-129=spectrum user-130=hodgesonweb user-131=theblack user-132=agproduc user-133=still user-134=stephani user-135=leereyn1 user-136=booff user-137=markward user-138=foundation user-139=vantagep user-140=connect9 user-141=athenare user-142=lbscrmod user-143=maflemin user-144=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 03:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 03:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:47 nativespace-cdp sudo[2905590]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 03:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:47 nativespace-cdp sudo[2905596]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v3IJqXKAYqCbRIYI.~
Sep 17 03:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:47 nativespace-cdp sudo[2905599]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v3IJqXKAYqCbRIYI.~'
Sep 17 03:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:47 nativespace-cdp sudo[2905602]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v3IJqXKAYqCbRIYI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 03:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:47 nativespace-cdp sudo[2905606]: pam_unix(sudo:session): session closed for user root
Sep 17 03:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 03:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:09:47 nativespace-cdp sudo[2905609]: pam_unix(sudo:session): session closed for user root
Sep 17 03:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 17 03:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 03:10:01 nativespace-cdp sudo[2905654]: pam_unix(sudo:session): session closed for user root
Sep 17 03:11:33 nativespace-cdp sshd[2906066]: Connection closed by 159.100.136.21 port 53694 [preauth]
Sep 17 03:16:34 nativespace-cdp sshd[2907170]: Connection closed by 159.100.136.21 port 34882 [preauth]
Sep 17 03:21:33 nativespace-cdp sshd[2908795]: Connection closed by 159.100.136.21 port 44174 [preauth]
Sep 17 03:26:33 nativespace-cdp sshd[2909845]: Connection closed by 159.100.136.21 port 53762 [preauth]
Sep 17 03:31:33 nativespace-cdp sshd[2911018]: Connection closed by 159.100.136.21 port 34636 [preauth]
Sep 17 03:36:35 nativespace-cdp sshd[2913221]: Connection closed by 159.100.136.21 port 43570 [preauth]
Sep 17 03:41:33 nativespace-cdp sshd[2914483]: Connection closed by 159.100.136.21 port 52032 [preauth]
Sep 17 03:46:34 nativespace-cdp sshd[2915856]: Connection closed by 159.100.136.21 port 33688 [preauth]
Sep 17 03:51:33 nativespace-cdp sshd[2917054]: Connection closed by 159.100.136.21 port 43160 [preauth]
Sep 17 03:56:33 nativespace-cdp sshd[2918372]: Connection closed by 159.100.136.21 port 52728 [preauth]
Sep 17 04:01:36 nativespace-cdp sshd[2920209]: Connection closed by 159.100.136.21 port 33936 [preauth]
Sep 17 04:06:36 nativespace-cdp sshd[2921496]: Connection closed by 159.100.136.21 port 43574 [preauth]
Sep 17 04:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 04:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:28 nativespace-cdp sudo[2922300]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 04:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:28 nativespace-cdp sudo[2922303]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 04:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:29 nativespace-cdp sudo[2922306]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:29 nativespace-cdp sudo[2922330]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922339]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922368]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922371]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922374]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922377]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922380]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 04:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:31 nativespace-cdp sudo[2922383]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:38 nativespace-cdp sudo[2922409]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:38 nativespace-cdp sudo[2922413]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstrel user-2=clarkass user-3=costestimatorco user-4=firstred user-5=highlegh user-6=southlon user-7=ultbcrra user-8=seftvta user-9=jonhartl user-10=firstres user-11=opaiscyx user-12=coursemc user-13=accooper user-14=ianrayne user-15=connectedshoppin user-16=thqkgnbz user-17=gilpin user-18=milloyco user-19=elecleis user-20=hubmaster user-21=putterfi user-22=fetch user-23=carsinyo user-24=bedfords user-25=newstoda user-26=belle user-27=ggaaorgu user-28=bemadonn user-29=nstriton user-30=brighto1 user-31=vivienn1 user-32=firstre2 user-33=oneoarco user-34=battlere user-35=innovat1 user-36=askhform user-37=stuartge user-38=nativene user-39=skyfirec user-40=alexadmin user-41=ulsukarm user-42=booff user-43=foundation user-44=markward user-45=vantagep user-46=athenare user-47=connect9 user-48=lbscrmod
Sep 17 04:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=maflemin user-50=agproduc user-51=still user-52=stephani user-53=leereyn1 user-54=jarvisin user-55=spectrum user-56=hodgesonweb user-57=theblack user-58=wilsonsw user-59=megacards user-60=musorguk user-61=brmrjxl user-62=lakesan1 user-63=strathar user-64=atestord user-65=sarafoundation user-66=hhdugcor user-67=lbhyisi user-68=magichat user-69=martsblo user-70=dickemery123 user-71=ptkxhsbt user-72=chrisdal user-73=mcdermos user-74=david user-75=nbhavers user-76=careers user-77=tomandle user-78=jennimil user-79=outdoorc user-80=hodgsonmail user-81=ranxterc user-82=branko user-83=romaldki user-84=lucy user-85=attlebor user-86=onlycont user-87=bakery user-88=crrtipdl user-89=sosevalu user-90=nove user-91=boldover user-92=stagingerris user-93=dancinggardener user-94=ladburyp user-95=kategilpin user-96=design user-97=oubpgvbx user-98=tstardom user-99=what user-100=havantho user-101=sketchy user-102=cath
Sep 17 04:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=nvihkvu user-104=bwppodcast user-105=zebrapho user-106=steve user-107=sibtoncc user-108=asandcoc user-109=beauty user-110=darkstar user-111=eatspam user-112=dhyana user-113=fawcettd user-114=burydropin user-115=nsceres user-116=isleofwi user-117=smrszyqg user-118=nomistakes user-119=hidden user-120=barbersh user-121=tigerlet user-122=nscdp user-123=putterfc user-124=leftie user-125=foods user-126=fortunaz user-127=health2045 user-128=lkpier user-129=donnychicago user-130=firstre5 user-131=steakbridieme user-132=ctedorgu user-133=philmcph user-134=hirefootballgame user-135=eugincou user-136=courseme user-137=cambria1 user-138=cathski user-139=reliable user-140=ninejimm user-141=cwsocial user-142=pugwash user-143=paulmca1 user-144=howardon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 04:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:39 nativespace-cdp sudo[2922419]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:39 nativespace-cdp sudo[2922427]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LI99MklLgDvFjEDa.~
Sep 17 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:39 nativespace-cdp sudo[2922430]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LI99MklLgDvFjEDa.~'
Sep 17 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:39 nativespace-cdp sudo[2922433]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LI99MklLgDvFjEDa.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:39 nativespace-cdp sudo[2922437]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:39 nativespace-cdp sudo[2922440]: pam_unix(sudo:session): session closed for user root
Sep 17 04:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 17 04:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 04:09:40 nativespace-cdp sudo[2922460]: pam_unix(sudo:session): session closed for user root
Sep 17 04:11:33 nativespace-cdp sshd[2923028]: Connection closed by 159.100.136.21 port 53144 [preauth]
Sep 17 04:14:05 nativespace-cdp sshd[2923544]: Invalid user sftp from 103.193.178.180 port 47012
Sep 17 04:14:05 nativespace-cdp sshd[2923544]: input_userauth_request: invalid user sftp [preauth]
Sep 17 04:14:05 nativespace-cdp sshd[2923544]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 04:14:05 nativespace-cdp sshd[2923544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.178.180
Sep 17 04:14:07 nativespace-cdp sshd[2923544]: Failed password for invalid user sftp from 103.193.178.180 port 47012 ssh2
Sep 17 04:14:10 nativespace-cdp sshd[2923544]: Received disconnect from 103.193.178.180 port 47012:11: Bye Bye [preauth]
Sep 17 04:14:10 nativespace-cdp sshd[2923544]: Disconnected from 103.193.178.180 port 47012 [preauth]
Sep 17 04:16:33 nativespace-cdp sshd[2924717]: Connection closed by 159.100.136.21 port 33584 [preauth]
Sep 17 04:18:58 nativespace-cdp sshd[2925368]: Connection reset by 103.193.178.180 port 53994 [preauth]
Sep 17 04:19:40 nativespace-cdp sshd[2925492]: Invalid user upload from 103.193.178.180 port 42634
Sep 17 04:19:40 nativespace-cdp sshd[2925492]: input_userauth_request: invalid user upload [preauth]
Sep 17 04:19:40 nativespace-cdp sshd[2925492]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 04:19:40 nativespace-cdp sshd[2925492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.178.180
Sep 17 04:19:42 nativespace-cdp sshd[2925492]: Failed password for invalid user upload from 103.193.178.180 port 42634 ssh2
Sep 17 04:19:43 nativespace-cdp sshd[2925492]: Received disconnect from 103.193.178.180 port 42634:11: Bye Bye [preauth]
Sep 17 04:19:43 nativespace-cdp sshd[2925492]: Disconnected from 103.193.178.180 port 42634 [preauth]
Sep 17 04:20:38 nativespace-cdp sshd[2925814]: Invalid user ubuntu from 103.193.178.180 port 59114
Sep 17 04:20:38 nativespace-cdp sshd[2925814]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 04:20:38 nativespace-cdp sshd[2925814]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 04:20:38 nativespace-cdp sshd[2925814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.178.180
Sep 17 04:20:39 nativespace-cdp sshd[2925814]: Failed password for invalid user ubuntu from 103.193.178.180 port 59114 ssh2
Sep 17 04:20:40 nativespace-cdp sshd[2925814]: Received disconnect from 103.193.178.180 port 59114:11: Bye Bye [preauth]
Sep 17 04:20:40 nativespace-cdp sshd[2925814]: Disconnected from 103.193.178.180 port 59114 [preauth]
Sep 17 04:21:33 nativespace-cdp sshd[2926040]: Connection closed by 159.100.136.21 port 42890 [preauth]
Sep 17 04:26:33 nativespace-cdp sshd[2927172]: Connection closed by 159.100.136.21 port 52426 [preauth]
Sep 17 04:31:33 nativespace-cdp sshd[2928340]: Connection closed by 159.100.136.21 port 32996 [preauth]
Sep 17 04:36:35 nativespace-cdp sshd[2929822]: Connection closed by 159.100.136.21 port 41836 [preauth]
Sep 17 04:41:32 nativespace-cdp sshd[2932247]: Connection closed by 159.100.136.21 port 50962 [preauth]
Sep 17 04:46:32 nativespace-cdp sshd[2933824]: Connection closed by 159.100.136.21 port 60358 [preauth]
Sep 17 04:51:35 nativespace-cdp sshd[2935096]: Connection closed by 159.100.136.21 port 41558 [preauth]
Sep 17 05:05:17 nativespace-cdp crond[2936005]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:05:17 nativespace-cdp crond[2936006]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:05:17 nativespace-cdp crond[2936091]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:05:17 nativespace-cdp crond[2936093]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:05:17 nativespace-cdp crond[2936092]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:05:17 nativespace-cdp sshd[2936053]: Did not receive identification string from 159.100.136.21 port 50742
Sep 17 05:05:19 nativespace-cdp sshd[2936269]: Did not receive identification string from 159.100.136.21 port 59598
Sep 17 05:07:19 nativespace-cdp sshd[2936862]: Did not receive identification string from 159.100.136.21 port 40574
Sep 17 05:10:02 nativespace-cdp crond[2937047]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:10:02 nativespace-cdp crond[2937048]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:10:02 nativespace-cdp crond[2937046]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937194]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937189]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937181]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937182]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937186]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937190]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937188]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937191]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937175]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937136]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937135]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937180]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937193]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937187]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937185]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937178]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937192]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937184]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937137]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937177]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937179]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937176]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:44 nativespace-cdp crond[2937183]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:11:45 nativespace-cdp sshd[2937313]: Did not receive identification string from 159.100.136.21 port 49566
Sep 17 05:13:13 nativespace-cdp crond[2937273]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:13:13 nativespace-cdp crond[2937274]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 17 05:13:14 nativespace-cdp CROND[2936900]: pam_systemd(crond:session): Failed to release session: Connection timed out
Sep 17 05:13:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 05:13:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:06 nativespace-cdp sudo[2938042]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 05:14:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:06 nativespace-cdp sudo[2938084]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 05:14:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 05:14:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:21 nativespace-cdp sudo[2938155]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 05:14:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:21 nativespace-cdp sudo[2938159]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 05:14:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:24 nativespace-cdp sudo[2938137]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:25 nativespace-cdp sudo[2938162]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bwppodcast user-2=zebrapho user-3=steve user-4=sibtoncc user-5=asandcoc user-6=beauty user-7=eatspam user-8=darkstar user-9=dhyana user-10=burydropin user-11=fawcettd user-12=nsceres user-13=smrszyqg user-14=isleofwi user-15=hidden user-16=nomistakes user-17=tigerlet user-18=barbersh user-19=putterfc user-20=nscdp user-21=health2045 user-22=fortunaz user-23=leftie user-24=foods user-25=lkpier user-26=philmcph user-27=ctedorgu user-28=steakbridieme user-29=donnychicago user-30=firstre5 user-31=hirefootballgame user-32=eugincou user-33=courseme user-34=cambria1 user-35=cathski user-36=ninejimm user-37=reliable user-38=howardon user-39=paulmca1 user-40=pugwash user-41=cwsocial user-42=chrisdal user-43=mcdermos user-44=nbhavers user-45=careers user-46=david user-47=tomandle user-48=jennimil
Sep 17 05:14:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=outdoorc user-50=hodgsonmail user-51=ranxterc user-52=branko user-53=romaldki user-54=attlebor user-55=lucy user-56=onlycont user-57=bakery user-58=sosevalu user-59=crrtipdl user-60=nove user-61=boldover user-62=ladburyp user-63=stagingerris user-64=dancinggardener user-65=kategilpin user-66=design user-67=oubpgvbx user-68=tstardom user-69=what user-70=cath user-71=sketchy user-72=havantho user-73=nvihkvu user-74=ulsukarm user-75=markward user-76=booff user-77=foundation user-78=athenare user-79=connect9 user-80=vantagep user-81=maflemin user-82=lbscrmod user-83=still user-84=agproduc user-85=stephani user-86=leereyn1 user-87=jarvisin user-88=spectrum user-89=theblack user-90=hodgesonweb user-91=wilsonsw user-92=musorguk user-93=megacards user-94=brmrjxl user-95=lakesan1 user-96=strathar user-97=sarafoundation user-98=atestord user-99=lbhyisi user-100=hhdugcor user-101=magichat user-102=martsblo
Sep 17 05:14:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 05:14:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=dickemery123 user-104=ptkxhsbt user-105=clarkass user-106=firstrel user-107=costestimatorco user-108=firstred user-109=southlon user-110=highlegh user-111=seftvta user-112=jonhartl user-113=ultbcrra user-114=firstres user-115=opaiscyx user-116=coursemc user-117=accooper user-118=ianrayne user-119=connectedshoppin user-120=thqkgnbz user-121=gilpin user-122=milloyco user-123=elecleis user-124=hubmaster user-125=putterfi user-126=carsinyo user-127=fetch user-128=bedfords user-129=belle user-130=ggaaorgu user-131=newstoda user-132=bemadonn user-133=brighto1 user-134=nstriton user-135=firstre2 user-136=vivienn1 user-137=battlere user-138=oneoarco user-139=innovat1 user-140=stuartge user-141=askhform user-142=nativene user-143=skyfirec user-144=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 05:14:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 05:14:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:25 nativespace-cdp sudo[2938191]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 05:14:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:32 nativespace-cdp sudo[2938188]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 17 05:14:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:45 nativespace-cdp sudo[2938282]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 17 05:14:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:51 nativespace-cdp sudo[2938323]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:54 nativespace-cdp sudo[2938196]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 05:14:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:54 nativespace-cdp sudo[2938367]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 05:14:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:54 nativespace-cdp sudo[2938373]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 05:14:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:54 nativespace-cdp sudo[2938377]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 05:14:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:55 nativespace-cdp sudo[2938382]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 05:14:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:55 nativespace-cdp sudo[2938388]: pam_unix(sudo:session): session closed for user root
Sep 17 05:14:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 05:14:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:14:55 nativespace-cdp sudo[2938393]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 05:15:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:05 nativespace-cdp sudo[2938551]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 05:15:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:05 nativespace-cdp sudo[2938556]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hirefootballgame user-2=courseme user-3=eugincou user-4=ninejimm user-5=reliable user-6=cathski user-7=cambria1 user-8=pugwash user-9=paulmca1 user-10=howardon user-11=cwsocial user-12=smrszyqg user-13=isleofwi user-14=barbersh user-15=tigerlet user-16=hidden user-17=nomistakes user-18=fortunaz user-19=health2045 user-20=leftie user-21=foods user-22=putterfc user-23=nscdp user-24=philmcph user-25=ctedorgu user-26=steakbridieme user-27=donnychicago user-28=firstre5 user-29=lkpier user-30=eatspam user-31=darkstar user-32=beauty user-33=dhyana user-34=burydropin user-35=fawcettd user-36=nsceres user-37=zebrapho user-38=bwppodcast user-39=steve user-40=sibtoncc user-41=asandcoc user-42=kategilpin user-43=ladburyp user-44=stagingerris user-45=dancinggardener user-46=design user-47=what
Sep 17 05:15:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=oubpgvbx user-49=tstardom user-50=nvihkvu user-51=cath user-52=sketchy user-53=havantho user-54=sosevalu user-55=crrtipdl user-56=bakery user-57=nove user-58=boldover user-59=branko user-60=ranxterc user-61=hodgsonmail user-62=outdoorc user-63=romaldki user-64=attlebor user-65=lucy user-66=onlycont user-67=mcdermos user-68=chrisdal user-69=careers user-70=nbhavers user-71=david user-72=tomandle user-73=jennimil user-74=lbhyisi user-75=hhdugcor user-76=magichat user-77=martsblo user-78=ptkxhsbt user-79=dickemery123 user-80=wilsonsw user-81=musorguk user-82=megacards user-83=brmrjxl user-84=lakesan1 user-85=sarafoundation user-86=atestord user-87=strathar user-88=still user-89=agproduc user-90=leereyn1 user-91=stephani user-92=jarvisin user-93=hodgesonweb user-94=theblack user-95=spectrum user-96=ulsukarm user-97=markward user-98=booff user-99=foundation user-100=maflemin user-101=lbscrmod user-102=connect9
Sep 17 05:15:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=athenare user-104=vantagep user-105=stuartge user-106=askhform user-107=innovat1 user-108=nativene user-109=skyfirec user-110=alexadmin user-111=bedfords user-112=bemadonn user-113=ggaaorgu user-114=belle user-115=newstoda user-116=brighto1 user-117=nstriton user-118=battlere user-119=oneoarco user-120=firstre2 user-121=vivienn1 user-122=ianrayne user-123=accooper user-124=thqkgnbz user-125=connectedshoppin user-126=elecleis user-127=milloyco user-128=gilpin user-129=carsinyo user-130=fetch user-131=putterfi user-132=hubmaster user-133=costestimatorco user-134=firstrel user-135=clarkass user-136=southlon user-137=highlegh user-138=firstred user-139=firstres user-140=seftvta user-141=jonhartl user-142=ultbcrra user-143=opaiscyx user-144=coursemc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 05:15:05 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 05:15:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:06 nativespace-cdp sudo[2938561]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 05:15:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:07 nativespace-cdp sudo[2938578]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EfAPTOjdnknKLNON.~
Sep 17 05:15:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:07 nativespace-cdp sudo[2938583]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EfAPTOjdnknKLNON.~'
Sep 17 05:15:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:07 nativespace-cdp sudo[2938586]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EfAPTOjdnknKLNON.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 05:15:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:07 nativespace-cdp sudo[2938590]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 05:15:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:07 nativespace-cdp sudo[2938593]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 17 05:15:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:19 nativespace-cdp sudo[2938623]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 17 05:15:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:20 nativespace-cdp sudo[2938651]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 17 05:15:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 17 05:15:25 nativespace-cdp sudo[2938686]: pam_unix(sudo:session): session closed for user onlycont
Sep 17 05:15:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 17 05:15:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:27 nativespace-cdp sudo[2938692]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 17 05:15:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:28 nativespace-cdp sudo[2938698]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 17 05:15:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:30 nativespace-cdp sudo[2938706]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 17 05:15:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:30 nativespace-cdp sudo[2938729]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 17 05:15:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:31 nativespace-cdp sudo[2938732]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 17 05:15:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:32 nativespace-cdp sudo[2938737]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 17 05:15:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:43 nativespace-cdp sudo[2938782]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 17 05:15:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:54 nativespace-cdp sudo[2938837]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 17 05:15:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 17 05:15:57 nativespace-cdp sudo[2938893]: pam_unix(sudo:session): session closed for user oneoarco
Sep 17 05:15:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 17 05:15:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:58 nativespace-cdp sudo[2938901]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 17 05:15:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 17 05:15:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:15:59 nativespace-cdp sudo[2938913]: pam_unix(sudo:session): session closed for user root
Sep 17 05:15:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 17 05:15:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:00 nativespace-cdp sudo[2938921]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 17 05:16:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:00 nativespace-cdp sudo[2938933]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 17 05:16:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:00 nativespace-cdp sudo[2938917]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:01 nativespace-cdp sudo[2938936]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 17 05:16:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:01 nativespace-cdp sudo[2938947]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 17 05:16:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:14 nativespace-cdp sudo[2939034]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 17 05:16:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:14 nativespace-cdp sudo[2939043]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 17 05:16:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 17 05:16:17 nativespace-cdp sudo[2939066]: pam_unix(sudo:session): session closed for user lkpier
Sep 17 05:16:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 17 05:16:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:18 nativespace-cdp sudo[2939073]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 17 05:16:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:18 nativespace-cdp sudo[2939079]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 17 05:16:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:18 nativespace-cdp sudo[2939088]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 17 05:16:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:19 nativespace-cdp sudo[2939101]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 17 05:16:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:19 nativespace-cdp sudo[2939108]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 17 05:16:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:21 nativespace-cdp sudo[2939132]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 17 05:16:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:21 nativespace-cdp sudo[2939139]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 17 05:16:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 17 05:16:23 nativespace-cdp sudo[2939153]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 17 05:16:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 17 05:16:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:23 nativespace-cdp sudo[2939161]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 17 05:16:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:24 nativespace-cdp sudo[2939167]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 17 05:16:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:24 nativespace-cdp sudo[2939174]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 17 05:16:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:28 nativespace-cdp sudo[2939197]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 17 05:16:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 17 05:16:31 nativespace-cdp sudo[2939230]: pam_unix(sudo:session): session closed for user oneoarco
Sep 17 05:16:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 17 05:16:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:32 nativespace-cdp sudo[2939239]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 17 05:16:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:32 nativespace-cdp sudo[2939258]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 17 05:16:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:33 nativespace-cdp sudo[2939264]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 17 05:16:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:33 nativespace-cdp sudo[2939288]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:34 nativespace-cdp sshd[2939297]: Connection closed by 159.100.136.21 port 58592 [preauth]
Sep 17 05:16:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 17 05:16:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:35 nativespace-cdp sudo[2939350]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 17 05:16:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:36 nativespace-cdp sudo[2939359]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 17 05:16:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 17 05:16:38 nativespace-cdp sudo[2939381]: pam_unix(sudo:session): session closed for user fortunaz
Sep 17 05:16:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 17 05:16:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:39 nativespace-cdp sudo[2939388]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 17 05:16:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:39 nativespace-cdp sudo[2939396]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 17 05:16:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:39 nativespace-cdp sudo[2939404]: pam_unix(sudo:session): session closed for user root
Sep 17 05:16:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/onlycont/public_html/wp" (https://apexred.com/wp): Failed to reset cache for the instance #1: Error: Error establishing a database connection.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>2. Website "/home/oneoarco/public_html" (http://oneoar.co.uk): Failed to reset cache for the instance #8: Error: Error establishing a database connection.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>3. Website "/home/lkpier/public_html" (http://limekilnspier.org.uk): Failed to reset cache for the instance #11:
Sep 17 05:16:39 nativespace-cdp sudo: wp-toolkit : (command continued) Error: Error establishing a database connection.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>4. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>5. Website "/home/oneoarco/public_html/pinstripe.services" (http://pinstripe.services): Failed to reset cache for the instance #13: Error: Error establishing a database connection.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>6. Website "/home/fortunaz/public_html" (http://fortunazingara.com): Failed to reset cache for the instance #17: Error: Error establishing a database connection.#012[error]FailedToExecuteWpCliCommand: exit status
Sep 17 05:16:39 nativespace-cdp sudo: wp-toolkit : (command continued) 1[/error]#012<br/><br/>' --output=json
Sep 17 05:16:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 05:16:40 nativespace-cdp sudo[2939409]: pam_unix(sudo:session): session closed for user root
Sep 17 05:21:33 nativespace-cdp sshd[2941506]: Connection closed by 159.100.136.21 port 39566 [preauth]
Sep 17 05:26:33 nativespace-cdp sshd[2942647]: Connection closed by 159.100.136.21 port 49048 [preauth]
Sep 17 05:31:33 nativespace-cdp sshd[2943764]: Connection closed by 159.100.136.21 port 58320 [preauth]
Sep 17 05:33:46 nativespace-cdp sshd[2944326]: Bad protocol version identification '\026\003\001' from 199.45.154.117 port 53158
Sep 17 05:33:49 nativespace-cdp sshd[2944332]: Did not receive identification string from 199.45.154.117 port 53186
Sep 17 05:34:09 nativespace-cdp sshd[2944345]: Connection closed by 199.45.154.117 port 53226 [preauth]
Sep 17 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user alexadmin by (uid=0)
Sep 17 05:35:09 nativespace-cdp su[2944955]: pam_unix(su:session): session closed for user alexadmin
Sep 17 05:36:33 nativespace-cdp sshd[2945433]: Connection closed by 159.100.136.21 port 39892 [preauth]
Sep 17 05:41:33 nativespace-cdp sshd[2946557]: Connection closed by 159.100.136.21 port 48972 [preauth]
Sep 17 05:46:33 nativespace-cdp sshd[2947574]: Connection closed by 159.100.136.21 port 57422 [preauth]
Sep 17 05:51:34 nativespace-cdp sshd[2949201]: Connection closed by 159.100.136.21 port 37626 [preauth]
Sep 17 05:56:36 nativespace-cdp sshd[2950294]: Connection closed by 159.100.136.21 port 47006 [preauth]
Sep 17 06:01:33 nativespace-cdp sshd[2951542]: Connection closed by 159.100.136.21 port 56484 [preauth]
Sep 17 06:06:33 nativespace-cdp sshd[2953131]: Connection closed by 159.100.136.21 port 38102 [preauth]
Sep 17 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:33 nativespace-cdp sudo[2953870]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:33 nativespace-cdp sudo[2953874]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:38 nativespace-cdp sudo[2953879]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 06:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:38 nativespace-cdp sudo[2953918]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 06:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:50 nativespace-cdp sudo[2953924]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:51 nativespace-cdp sudo[2953973]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:51 nativespace-cdp sudo[2953978]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:51 nativespace-cdp sudo[2953982]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:51 nativespace-cdp sudo[2953987]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:51 nativespace-cdp sudo[2953994]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:51 nativespace-cdp sudo[2953999]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 06:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:09:59 nativespace-cdp sudo[2954038]: pam_unix(sudo:session): session closed for user root
Sep 17 06:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 06:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:08 nativespace-cdp sudo[2954046]: pam_unix(sudo:session): session closed for user root
Sep 17 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=coursemc user-2=opaiscyx user-3=ultbcrra user-4=jonhartl user-5=seftvta user-6=firstres user-7=firstred user-8=highlegh user-9=southlon user-10=clarkass user-11=firstrel user-12=costestimatorco user-13=putterfi user-14=hubmaster user-15=fetch user-16=carsinyo user-17=milloyco user-18=gilpin user-19=elecleis user-20=connectedshoppin user-21=thqkgnbz user-22=accooper user-23=ianrayne user-24=vivienn1 user-25=firstre2 user-26=oneoarco user-27=battlere user-28=nstriton user-29=brighto1 user-30=newstoda user-31=belle user-32=ggaaorgu user-33=bemadonn user-34=bedfords user-35=alexadmin user-36=skyfirec user-37=nativene user-38=innovat1 user-39=askhform user-40=stuartge user-41=vantagep user-42=athenare user-43=connect9 user-44=lbscrmod user-45=maflemin user-46=booff user-47=markward user-48=foundation
Sep 17 06:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ulsukarm user-50=spectrum user-51=theblack user-52=hodgesonweb user-53=jarvisin user-54=stephani user-55=leereyn1 user-56=agproduc user-57=still user-58=strathar user-59=atestord user-60=sarafoundation user-61=lakesan1 user-62=brmrjxl user-63=megacards user-64=musorguk user-65=wilsonsw user-66=dickemery123 user-67=ptkxhsbt user-68=martsblo user-69=magichat user-70=hhdugcor user-71=lbhyisi user-72=jennimil user-73=tomandle user-74=david user-75=careers user-76=nbhavers user-77=chrisdal user-78=mcdermos user-79=onlycont user-80=lucy user-81=attlebor user-82=romaldki user-83=ranxterc user-84=hodgsonmail user-85=outdoorc user-86=branko user-87=boldover user-88=nove user-89=bakery user-90=crrtipdl user-91=sosevalu user-92=havantho user-93=cath user-94=sketchy user-95=nvihkvu user-96=oubpgvbx user-97=tstardom user-98=what user-99=design user-100=stagingerris user-101=dancinggardener user-102=ladburyp
Sep 17 06:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=kategilpin user-104=sibtoncc user-105=asandcoc user-106=steve user-107=bwppodcast user-108=zebrapho user-109=nsceres user-110=fawcettd user-111=burydropin user-112=dhyana user-113=beauty user-114=darkstar user-115=eatspam user-116=lkpier user-117=steakbridieme user-118=donnychicago user-119=firstre5 user-120=philmcph user-121=ctedorgu user-122=nscdp user-123=putterfc user-124=foods user-125=leftie user-126=health2045 user-127=fortunaz user-128=nomistakes user-129=hidden user-130=tigerlet user-131=barbersh user-132=isleofwi user-133=smrszyqg user-134=cwsocial user-135=howardon user-136=pugwash user-137=paulmca1 user-138=cathski user-139=cambria1 user-140=reliable user-141=ninejimm user-142=eugincou user-143=courseme user-144=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 06:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:12 nativespace-cdp sudo[2954181]: pam_unix(sudo:session): session closed for user root
Sep 17 06:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 06:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:14 nativespace-cdp sudo[2954201]: pam_unix(sudo:session): session closed for user root
Sep 17 06:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qxXg0fkZQzsFmhnP.~
Sep 17 06:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:15 nativespace-cdp sudo[2954208]: pam_unix(sudo:session): session closed for user root
Sep 17 06:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qxXg0fkZQzsFmhnP.~'
Sep 17 06:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:15 nativespace-cdp sudo[2954211]: pam_unix(sudo:session): session closed for user root
Sep 17 06:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qxXg0fkZQzsFmhnP.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 06:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:15 nativespace-cdp sudo[2954215]: pam_unix(sudo:session): session closed for user root
Sep 17 06:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 06:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 06:10:15 nativespace-cdp sudo[2954218]: pam_unix(sudo:session): session closed for user root
Sep 17 06:11:34 nativespace-cdp sshd[2954510]: Connection closed by 159.100.136.21 port 47460 [preauth]
Sep 17 06:16:35 nativespace-cdp sshd[2955733]: Connection closed by 159.100.136.21 port 55940 [preauth]
Sep 17 06:21:33 nativespace-cdp sshd[2957327]: Connection closed by 159.100.136.21 port 36700 [preauth]
Sep 17 06:26:34 nativespace-cdp sshd[2958427]: Connection closed by 159.100.136.21 port 46240 [preauth]
Sep 17 06:31:33 nativespace-cdp sshd[2959564]: Connection closed by 159.100.136.21 port 55726 [preauth]
Sep 17 06:36:33 nativespace-cdp sshd[2961264]: Connection closed by 159.100.136.21 port 36858 [preauth]
Sep 17 06:41:33 nativespace-cdp sshd[2962494]: Connection closed by 159.100.136.21 port 45830 [preauth]
Sep 17 06:46:35 nativespace-cdp sshd[2963590]: Connection closed by 159.100.136.21 port 55640 [preauth]
Sep 17 06:51:33 nativespace-cdp sshd[2965265]: Connection closed by 159.100.136.21 port 36618 [preauth]
Sep 17 06:56:35 nativespace-cdp sshd[2966461]: Connection closed by 159.100.136.21 port 45446 [preauth]
Sep 17 07:01:34 nativespace-cdp sshd[2967827]: Connection closed by 159.100.136.21 port 54584 [preauth]
Sep 17 07:06:33 nativespace-cdp sshd[2969603]: Connection closed by 159.100.136.21 port 35644 [preauth]
Sep 17 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:17 nativespace-cdp sudo[2970290]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:17 nativespace-cdp sudo[2970294]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:18 nativespace-cdp sudo[2970299]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:18 nativespace-cdp sudo[2970309]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 07:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:19 nativespace-cdp sudo[2970315]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:19 nativespace-cdp sudo[2970324]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:19 nativespace-cdp sudo[2970328]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:19 nativespace-cdp sudo[2970332]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:19 nativespace-cdp sudo[2970338]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:20 nativespace-cdp sudo[2970343]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:20 nativespace-cdp sudo[2970349]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:38 nativespace-cdp sudo[2970412]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:38 nativespace-cdp sudo[2970418]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=eatspam user-3=darkstar user-4=beauty user-5=nsceres user-6=burydropin user-7=fawcettd user-8=steve user-9=zebrapho user-10=bwppodcast user-11=asandcoc user-12=sibtoncc user-13=courseme user-14=eugincou user-15=hirefootballgame user-16=pugwash user-17=howardon user-18=paulmca1 user-19=cwsocial user-20=ninejimm user-21=reliable user-22=cathski user-23=cambria1 user-24=barbersh user-25=tigerlet user-26=hidden user-27=nomistakes user-28=smrszyqg user-29=isleofwi user-30=philmcph user-31=ctedorgu user-32=donnychicago user-33=steakbridieme user-34=firstre5 user-35=lkpier user-36=fortunaz user-37=health2045 user-38=foods user-39=leftie user-40=putterfc user-41=nscdp user-42=romaldki user-43=branko user-44=outdoorc user-45=hodgsonmail user-46=ranxterc user-47=onlycont user-48=attlebor
Sep 17 07:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=careers user-51=nbhavers user-52=david user-53=mcdermos user-54=chrisdal user-55=jennimil user-56=tomandle user-57=design user-58=kategilpin user-59=ladburyp user-60=stagingerris user-61=dancinggardener user-62=nvihkvu user-63=sketchy user-64=cath user-65=havantho user-66=what user-67=oubpgvbx user-68=tstardom user-69=sosevalu user-70=crrtipdl user-71=bakery user-72=boldover user-73=nove user-74=leereyn1 user-75=stephani user-76=still user-77=agproduc user-78=theblack user-79=hodgesonweb user-80=spectrum user-81=jarvisin user-82=ulsukarm user-83=maflemin user-84=lbscrmod user-85=athenare user-86=connect9 user-87=vantagep user-88=foundation user-89=markward user-90=booff user-91=magichat user-92=lbhyisi user-93=hhdugcor user-94=ptkxhsbt user-95=dickemery123 user-96=martsblo user-97=musorguk user-98=megacards user-99=wilsonsw user-100=sarafoundation user-101=atestord user-102=strathar
Sep 17 07:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=brmrjxl user-104=lakesan1 user-105=thqkgnbz user-106=connectedshoppin user-107=ianrayne user-108=accooper user-109=carsinyo user-110=fetch user-111=hubmaster user-112=putterfi user-113=elecleis user-114=gilpin user-115=milloyco user-116=southlon user-117=highlegh user-118=firstred user-119=costestimatorco user-120=clarkass user-121=firstrel user-122=coursemc user-123=opaiscyx user-124=firstres user-125=seftvta user-126=jonhartl user-127=ultbcrra user-128=nativene user-129=askhform user-130=stuartge user-131=innovat1 user-132=skyfirec user-133=alexadmin user-134=bemadonn user-135=ggaaorgu user-136=belle user-137=newstoda user-138=bedfords user-139=battlere user-140=oneoarco user-141=firstre2 user-142=vivienn1 user-143=brighto1 user-144=nstriton feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains
Sep 17 07:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-9=webprotect feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:39 nativespace-cdp sudo[2970425]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:39 nativespace-cdp sudo[2970434]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PCOTwMvSYTCSyYKK.~
Sep 17 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:39 nativespace-cdp sudo[2970439]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PCOTwMvSYTCSyYKK.~'
Sep 17 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:39 nativespace-cdp sudo[2970443]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PCOTwMvSYTCSyYKK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:39 nativespace-cdp sudo[2970449]: pam_unix(sudo:session): session closed for user root
Sep 17 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:09:39 nativespace-cdp sudo[2970454]: pam_unix(sudo:session): session closed for user root
Sep 17 07:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 07:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:10:27 nativespace-cdp sudo[2970768]: pam_unix(sudo:session): session closed for user root
Sep 17 07:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 07:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:10:27 nativespace-cdp sudo[2970772]: pam_unix(sudo:session): session closed for user root
Sep 17 07:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 07:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:11:09 nativespace-cdp sudo[2971127]: pam_unix(sudo:session): session closed for user root
Sep 17 07:11:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 07:11:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 07:11:09 nativespace-cdp sudo[2971134]: pam_unix(sudo:session): session closed for user root
Sep 17 07:11:33 nativespace-cdp sshd[2971366]: Connection closed by 159.100.136.21 port 44652 [preauth]
Sep 17 07:16:33 nativespace-cdp sshd[2972595]: Connection closed by 159.100.136.21 port 54054 [preauth]
Sep 17 07:21:34 nativespace-cdp sshd[2974369]: Connection closed by 159.100.136.21 port 35166 [preauth]
Sep 17 07:26:33 nativespace-cdp sshd[2975497]: Connection closed by 159.100.136.21 port 44686 [preauth]
Sep 17 07:31:35 nativespace-cdp sshd[2976792]: Connection closed by 159.100.136.21 port 52746 [preauth]
Sep 17 07:36:34 nativespace-cdp sshd[2978442]: Connection closed by 159.100.136.21 port 33668 [preauth]
Sep 17 07:41:33 nativespace-cdp sshd[2979627]: Connection closed by 159.100.136.21 port 42852 [preauth]
Sep 17 07:46:35 nativespace-cdp sshd[2980806]: Connection closed by 159.100.136.21 port 52422 [preauth]
Sep 17 07:51:33 nativespace-cdp sshd[2982487]: Connection closed by 159.100.136.21 port 33158 [preauth]
Sep 17 07:56:33 nativespace-cdp sshd[2983478]: Connection closed by 159.100.136.21 port 42550 [preauth]
Sep 17 08:01:36 nativespace-cdp sshd[2985049]: Connection closed by 159.100.136.21 port 51610 [preauth]
Sep 17 08:06:36 nativespace-cdp sshd[2986336]: Connection closed by 159.100.136.21 port 60674 [preauth]
Sep 17 08:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 08:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:17 nativespace-cdp sudo[2987376]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 08:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:17 nativespace-cdp sudo[2987380]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 08:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:18 nativespace-cdp sudo[2987385]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:18 nativespace-cdp sudo[2987392]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987398]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987407]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987412]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987416]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987421]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987428]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 08:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:20 nativespace-cdp sudo[2987433]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:22 nativespace-cdp sudo[2987447]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:22 nativespace-cdp sudo[2987454]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=romaldki user-2=branko user-3=ranxterc user-4=outdoorc user-5=hodgsonmail user-6=onlycont user-7=attlebor user-8=lucy user-9=nbhavers user-10=careers user-11=david user-12=mcdermos user-13=chrisdal user-14=jennimil user-15=tomandle user-16=design user-17=kategilpin user-18=ladburyp user-19=dancinggardener user-20=stagingerris user-21=nvihkvu user-22=cath user-23=sketchy user-24=havantho user-25=what user-26=oubpgvbx user-27=tstardom user-28=sosevalu user-29=crrtipdl user-30=bakery user-31=boldover user-32=nove user-33=dhyana user-34=eatspam user-35=darkstar user-36=beauty user-37=nsceres user-38=burydropin user-39=fawcettd user-40=steve user-41=zebrapho user-42=bwppodcast user-43=asandcoc user-44=sibtoncc user-45=courseme user-46=eugincou user-47=hirefootballgame user-48=pugwash user-49=paulmca1
Sep 17 08:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=cwsocial user-52=reliable user-53=ninejimm user-54=cathski user-55=cambria1 user-56=barbersh user-57=tigerlet user-58=hidden user-59=nomistakes user-60=isleofwi user-61=smrszyqg user-62=ctedorgu user-63=philmcph user-64=donnychicago user-65=firstre5 user-66=steakbridieme user-67=lkpier user-68=fortunaz user-69=health2045 user-70=leftie user-71=foods user-72=nscdp user-73=thqkgnbz user-74=connectedshoppin user-75=ianrayne user-76=accooper user-77=carsinyo user-78=fetch user-79=hubmaster user-80=elecleis user-81=milloyco user-82=gilpin user-83=southlon user-84=highlegh user-85=firstred user-86=costestimatorco user-87=clarkass user-88=firstrel user-89=opaiscyx user-90=coursemc user-91=firstres user-92=seftvta user-93=jonhartl user-94=ultbcrra user-95=nativene user-96=askhform user-97=stuartge user-98=innovat1 user-99=skyfirec user-100=alexadmin user-101=bemadonn user-102=ggaaorgu
Sep 17 08:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=belle user-104=newstoda user-105=bedfords user-106=battlere user-107=oneoarco user-108=firstre2 user-109=vivienn1 user-110=brighto1 user-111=nstriton user-112=leereyn1 user-113=stephani user-114=still user-115=agproduc user-116=theblack user-117=hodgesonweb user-118=spectrum user-119=jarvisin user-120=ulsukarm user-121=maflemin user-122=lbscrmod user-123=connect9 user-124=athenare user-125=vantagep user-126=booff user-127=foundation user-128=markward user-129=magichat user-130=lbhyisi user-131=hhdugcor user-132=ptkxhsbt user-133=dickemery123 user-134=martsblo user-135=musorguk user-136=megacards user-137=wilsonsw user-138=sarafoundation user-139=atestord user-140=strathar user-141=lakesan1 user-142=brmrjxl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 08:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 08:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:23 nativespace-cdp sudo[2987463]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:23 nativespace-cdp sudo[2987474]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Cia4NczSzBtGsNzv.~
Sep 17 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:23 nativespace-cdp sudo[2987482]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Cia4NczSzBtGsNzv.~'
Sep 17 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:23 nativespace-cdp sudo[2987486]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Cia4NczSzBtGsNzv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:23 nativespace-cdp sudo[2987492]: pam_unix(sudo:session): session closed for user root
Sep 17 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 08:09:23 nativespace-cdp sudo[2987497]: pam_unix(sudo:session): session closed for user root
Sep 17 08:10:59 nativespace-cdp sshd[2988109]: Invalid user deployer from 128.199.30.150 port 36524
Sep 17 08:10:59 nativespace-cdp sshd[2988109]: input_userauth_request: invalid user deployer [preauth]
Sep 17 08:10:59 nativespace-cdp sshd[2988109]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:10:59 nativespace-cdp sshd[2988109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.30.150
Sep 17 08:11:01 nativespace-cdp sshd[2988109]: Failed password for invalid user deployer from 128.199.30.150 port 36524 ssh2
Sep 17 08:11:01 nativespace-cdp sshd[2988109]: Received disconnect from 128.199.30.150 port 36524:11: Bye Bye [preauth]
Sep 17 08:11:01 nativespace-cdp sshd[2988109]: Disconnected from 128.199.30.150 port 36524 [preauth]
Sep 17 08:11:33 nativespace-cdp sshd[2988282]: Connection closed by 159.100.136.21 port 40426 [preauth]
Sep 17 08:14:56 nativespace-cdp sshd[2989083]: Invalid user ali from 128.199.150.58 port 43646
Sep 17 08:14:56 nativespace-cdp sshd[2989083]: input_userauth_request: invalid user ali [preauth]
Sep 17 08:14:56 nativespace-cdp sshd[2989083]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:14:56 nativespace-cdp sshd[2989083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.58
Sep 17 08:14:58 nativespace-cdp sshd[2989083]: Failed password for invalid user ali from 128.199.150.58 port 43646 ssh2
Sep 17 08:15:05 nativespace-cdp sshd[2989083]: Received disconnect from 128.199.150.58 port 43646:11: Bye Bye [preauth]
Sep 17 08:15:05 nativespace-cdp sshd[2989083]: Disconnected from 128.199.150.58 port 43646 [preauth]
Sep 17 08:15:24 nativespace-cdp sshd[2989336]: Invalid user student from 103.28.90.118 port 46404
Sep 17 08:15:24 nativespace-cdp sshd[2989336]: input_userauth_request: invalid user student [preauth]
Sep 17 08:15:24 nativespace-cdp sshd[2989336]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:15:24 nativespace-cdp sshd[2989336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.90.118
Sep 17 08:15:26 nativespace-cdp sshd[2989336]: Failed password for invalid user student from 103.28.90.118 port 46404 ssh2
Sep 17 08:15:26 nativespace-cdp sshd[2989336]: Received disconnect from 103.28.90.118 port 46404:11: Bye Bye [preauth]
Sep 17 08:15:26 nativespace-cdp sshd[2989336]: Disconnected from 103.28.90.118 port 46404 [preauth]
Sep 17 08:15:36 nativespace-cdp sshd[2989375]: Invalid user vanessa from 64.227.174.243 port 36964
Sep 17 08:15:36 nativespace-cdp sshd[2989375]: input_userauth_request: invalid user vanessa [preauth]
Sep 17 08:15:36 nativespace-cdp sshd[2989375]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:15:36 nativespace-cdp sshd[2989375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.174.243
Sep 17 08:15:37 nativespace-cdp sshd[2989375]: Failed password for invalid user vanessa from 64.227.174.243 port 36964 ssh2
Sep 17 08:15:37 nativespace-cdp sshd[2989375]: Received disconnect from 64.227.174.243 port 36964:11: Bye Bye [preauth]
Sep 17 08:15:37 nativespace-cdp sshd[2989375]: Disconnected from 64.227.174.243 port 36964 [preauth]
Sep 17 08:16:36 nativespace-cdp sshd[2989550]: Connection closed by 159.100.136.21 port 48524 [preauth]
Sep 17 08:18:10 nativespace-cdp sshd[2989838]: Invalid user user1 from 103.28.90.118 port 56762
Sep 17 08:18:10 nativespace-cdp sshd[2989838]: input_userauth_request: invalid user user1 [preauth]
Sep 17 08:18:10 nativespace-cdp sshd[2989838]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:18:10 nativespace-cdp sshd[2989838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.90.118
Sep 17 08:18:12 nativespace-cdp sshd[2989838]: Failed password for invalid user user1 from 103.28.90.118 port 56762 ssh2
Sep 17 08:18:12 nativespace-cdp sshd[2989838]: Received disconnect from 103.28.90.118 port 56762:11: Bye Bye [preauth]
Sep 17 08:18:12 nativespace-cdp sshd[2989838]: Disconnected from 103.28.90.118 port 56762 [preauth]
Sep 17 08:18:32 nativespace-cdp sshd[2989901]: Invalid user ftpuser from 128.199.150.58 port 42700
Sep 17 08:18:32 nativespace-cdp sshd[2989901]: input_userauth_request: invalid user ftpuser [preauth]
Sep 17 08:18:32 nativespace-cdp sshd[2989901]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:18:32 nativespace-cdp sshd[2989901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.58
Sep 17 08:18:34 nativespace-cdp sshd[2989901]: Failed password for invalid user ftpuser from 128.199.150.58 port 42700 ssh2
Sep 17 08:18:38 nativespace-cdp sshd[2989901]: Received disconnect from 128.199.150.58 port 42700:11: Bye Bye [preauth]
Sep 17 08:18:38 nativespace-cdp sshd[2989901]: Disconnected from 128.199.150.58 port 42700 [preauth]
Sep 17 08:18:56 nativespace-cdp sshd[2989974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.90.118  user=root
Sep 17 08:18:56 nativespace-cdp sshd[2989974]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 17 08:18:58 nativespace-cdp sshd[2989974]: Failed password for root from 103.28.90.118 port 34600 ssh2
Sep 17 08:18:58 nativespace-cdp sshd[2989974]: Received disconnect from 103.28.90.118 port 34600:11: Bye Bye [preauth]
Sep 17 08:18:58 nativespace-cdp sshd[2989974]: Disconnected from 103.28.90.118 port 34600 [preauth]
Sep 17 08:19:01 nativespace-cdp sshd[2990013]: Invalid user user from 186.38.26.5 port 35134
Sep 17 08:19:01 nativespace-cdp sshd[2990013]: input_userauth_request: invalid user user [preauth]
Sep 17 08:19:01 nativespace-cdp sshd[2990013]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:19:01 nativespace-cdp sshd[2990013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.38.26.5
Sep 17 08:19:03 nativespace-cdp sshd[2990013]: Failed password for invalid user user from 186.38.26.5 port 35134 ssh2
Sep 17 08:19:03 nativespace-cdp sshd[2990013]: Received disconnect from 186.38.26.5 port 35134:11: Bye Bye [preauth]
Sep 17 08:19:03 nativespace-cdp sshd[2990013]: Disconnected from 186.38.26.5 port 35134 [preauth]
Sep 17 08:19:10 nativespace-cdp sshd[2990051]: Invalid user testuser from 128.199.30.150 port 50354
Sep 17 08:19:10 nativespace-cdp sshd[2990051]: input_userauth_request: invalid user testuser [preauth]
Sep 17 08:19:10 nativespace-cdp sshd[2990051]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:19:10 nativespace-cdp sshd[2990051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.30.150
Sep 17 08:19:12 nativespace-cdp sshd[2990051]: Failed password for invalid user testuser from 128.199.30.150 port 50354 ssh2
Sep 17 08:19:13 nativespace-cdp sshd[2990051]: Received disconnect from 128.199.30.150 port 50354:11: Bye Bye [preauth]
Sep 17 08:19:13 nativespace-cdp sshd[2990051]: Disconnected from 128.199.30.150 port 50354 [preauth]
Sep 17 08:19:24 nativespace-cdp sshd[2990090]: Invalid user git from 128.199.150.58 port 51832
Sep 17 08:19:24 nativespace-cdp sshd[2990090]: input_userauth_request: invalid user git [preauth]
Sep 17 08:19:24 nativespace-cdp sshd[2990090]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:19:24 nativespace-cdp sshd[2990090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.58
Sep 17 08:19:26 nativespace-cdp sshd[2990090]: Failed password for invalid user git from 128.199.150.58 port 51832 ssh2
Sep 17 08:19:26 nativespace-cdp sshd[2990090]: Received disconnect from 128.199.150.58 port 51832:11: Bye Bye [preauth]
Sep 17 08:19:26 nativespace-cdp sshd[2990090]: Disconnected from 128.199.150.58 port 51832 [preauth]
Sep 17 08:19:43 nativespace-cdp sshd[2990283]: Invalid user ubuntu from 64.227.174.243 port 52782
Sep 17 08:19:43 nativespace-cdp sshd[2990283]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 08:19:43 nativespace-cdp sshd[2990283]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:19:43 nativespace-cdp sshd[2990283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.174.243
Sep 17 08:19:44 nativespace-cdp sshd[2990283]: Failed password for invalid user ubuntu from 64.227.174.243 port 52782 ssh2
Sep 17 08:19:45 nativespace-cdp sshd[2990283]: Received disconnect from 64.227.174.243 port 52782:11: Bye Bye [preauth]
Sep 17 08:19:45 nativespace-cdp sshd[2990283]: Disconnected from 64.227.174.243 port 52782 [preauth]
Sep 17 08:20:01 nativespace-cdp sshd[2990380]: Invalid user testftp from 128.199.30.150 port 53248
Sep 17 08:20:01 nativespace-cdp sshd[2990380]: input_userauth_request: invalid user testftp [preauth]
Sep 17 08:20:01 nativespace-cdp sshd[2990380]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:20:01 nativespace-cdp sshd[2990380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.30.150
Sep 17 08:20:03 nativespace-cdp sshd[2990380]: Failed password for invalid user testftp from 128.199.30.150 port 53248 ssh2
Sep 17 08:20:04 nativespace-cdp sshd[2990560]: Invalid user gmodserver from 186.38.26.5 port 48966
Sep 17 08:20:04 nativespace-cdp sshd[2990560]: input_userauth_request: invalid user gmodserver [preauth]
Sep 17 08:20:04 nativespace-cdp sshd[2990560]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:20:04 nativespace-cdp sshd[2990560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.38.26.5
Sep 17 08:20:06 nativespace-cdp sshd[2990560]: Failed password for invalid user gmodserver from 186.38.26.5 port 48966 ssh2
Sep 17 08:20:06 nativespace-cdp sshd[2990560]: Received disconnect from 186.38.26.5 port 48966:11: Bye Bye [preauth]
Sep 17 08:20:06 nativespace-cdp sshd[2990560]: Disconnected from 186.38.26.5 port 48966 [preauth]
Sep 17 08:20:33 nativespace-cdp sshd[2990712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.174.243  user=design
Sep 17 08:20:35 nativespace-cdp sshd[2990712]: Failed password for design from 64.227.174.243 port 49240 ssh2
Sep 17 08:20:35 nativespace-cdp sshd[2990712]: Received disconnect from 64.227.174.243 port 49240:11: Bye Bye [preauth]
Sep 17 08:20:35 nativespace-cdp sshd[2990712]: Disconnected from 64.227.174.243 port 49240 [preauth]
Sep 17 08:20:57 nativespace-cdp sshd[2990817]: Invalid user user1 from 186.38.26.5 port 33988
Sep 17 08:20:57 nativespace-cdp sshd[2990817]: input_userauth_request: invalid user user1 [preauth]
Sep 17 08:20:57 nativespace-cdp sshd[2990817]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 08:20:57 nativespace-cdp sshd[2990817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.38.26.5
Sep 17 08:21:00 nativespace-cdp sshd[2990817]: Failed password for invalid user user1 from 186.38.26.5 port 33988 ssh2
Sep 17 08:21:33 nativespace-cdp sshd[2991037]: Connection closed by 159.100.136.21 port 57694 [preauth]
Sep 17 08:26:33 nativespace-cdp sshd[2992266]: Connection closed by 159.100.136.21 port 38960 [preauth]
Sep 17 08:31:36 nativespace-cdp sshd[2993770]: Connection closed by 159.100.136.21 port 47892 [preauth]
Sep 17 08:36:33 nativespace-cdp sshd[2995437]: Connection closed by 159.100.136.21 port 57236 [preauth]
Sep 17 08:41:33 nativespace-cdp sshd[2996550]: Connection closed by 159.100.136.21 port 38184 [preauth]
Sep 17 08:46:34 nativespace-cdp sshd[2997734]: Connection closed by 159.100.136.21 port 47644 [preauth]
Sep 17 08:51:33 nativespace-cdp sshd[2999518]: Connection closed by 159.100.136.21 port 56642 [preauth]
Sep 17 08:56:33 nativespace-cdp sshd[3000642]: Connection closed by 159.100.136.21 port 37108 [preauth]
Sep 17 09:01:34 nativespace-cdp sshd[3002012]: Connection closed by 159.100.136.21 port 46202 [preauth]
Sep 17 09:06:33 nativespace-cdp sshd[3003955]: Connection closed by 159.100.136.21 port 55532 [preauth]
Sep 17 09:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 09:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:26 nativespace-cdp sudo[3004650]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 09:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:26 nativespace-cdp sudo[3004655]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 09:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:28 nativespace-cdp sudo[3004660]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 09:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:28 nativespace-cdp sudo[3004667]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 09:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004673]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004694]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004699]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004704]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004709]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004715]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 09:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:32 nativespace-cdp sudo[3004720]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 09:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:34 nativespace-cdp sudo[3004731]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 09:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:35 nativespace-cdp sudo[3004738]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=strathar user-2=sarafoundation user-3=atestord user-4=brmrjxl user-5=lakesan1 user-6=musorguk user-7=megacards user-8=wilsonsw user-9=dickemery123 user-10=ptkxhsbt user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=athenare user-16=connect9 user-17=vantagep user-18=maflemin user-19=lbscrmod user-20=booff user-21=markward user-22=foundation user-23=ulsukarm user-24=spectrum user-25=hodgesonweb user-26=theblack user-27=jarvisin user-28=stephani user-29=leereyn1 user-30=still user-31=agproduc user-32=firstre2 user-33=vivienn1 user-34=battlere user-35=oneoarco user-36=brighto1 user-37=nstriton user-38=ggaaorgu user-39=belle user-40=newstoda user-41=bemadonn user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=innovat1 user-47=stuartge user-48=askhform
Sep 17 09:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=seftvta user-52=jonhartl user-53=ultbcrra user-54=firstres user-55=firstred user-56=southlon user-57=highlegh user-58=clarkass user-59=firstrel user-60=costestimatorco user-61=hubmaster user-62=carsinyo user-63=fetch user-64=gilpin user-65=milloyco user-66=elecleis user-67=connectedshoppin user-68=thqkgnbz user-69=accooper user-70=ianrayne user-71=lkpier user-72=ctedorgu user-73=philmcph user-74=donnychicago user-75=firstre5 user-76=steakbridieme user-77=nscdp user-78=health2045 user-79=fortunaz user-80=foods user-81=leftie user-82=hidden user-83=nomistakes user-84=barbersh user-85=tigerlet user-86=isleofwi user-87=smrszyqg user-88=pugwash user-89=paulmca1 user-90=howardon user-91=cwsocial user-92=cambria1 user-93=cathski user-94=ninejimm user-95=reliable user-96=eugincou user-97=courseme user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 17 09:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=zebrapho user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=beauty user-109=eatspam user-110=darkstar user-111=boldover user-112=nove user-113=bakery user-114=sosevalu user-115=crrtipdl user-116=cath user-117=sketchy user-118=havantho user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=design user-124=ladburyp user-125=stagingerris user-126=dancinggardener user-127=kategilpin user-128=jennimil user-129=tomandle user-130=careers user-131=nbhavers user-132=david user-133=chrisdal user-134=mcdermos user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=outdoorc user-140=ranxterc user-141=hodgsonmail user-142=branko feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 09:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:36 nativespace-cdp sudo[3004748]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:37 nativespace-cdp sudo[3004757]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3c2na5PXQ9NpHW17.~
Sep 17 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:37 nativespace-cdp sudo[3004762]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3c2na5PXQ9NpHW17.~'
Sep 17 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:37 nativespace-cdp sudo[3004766]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3c2na5PXQ9NpHW17.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:37 nativespace-cdp sudo[3004772]: pam_unix(sudo:session): session closed for user root
Sep 17 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 09:09:37 nativespace-cdp sudo[3004778]: pam_unix(sudo:session): session closed for user root
Sep 17 09:11:36 nativespace-cdp sshd[3005385]: Connection closed by 159.100.136.21 port 36692 [preauth]
Sep 17 09:16:33 nativespace-cdp sshd[3006700]: Connection closed by 159.100.136.21 port 45770 [preauth]
Sep 17 09:21:34 nativespace-cdp sshd[3008076]: Connection closed by 159.100.136.21 port 55208 [preauth]
Sep 17 09:26:34 nativespace-cdp sshd[3009728]: Connection closed by 159.100.136.21 port 36670 [preauth]
Sep 17 09:31:33 nativespace-cdp sshd[3010993]: Connection closed by 159.100.136.21 port 46084 [preauth]
Sep 17 09:36:33 nativespace-cdp sshd[3012871]: Connection closed by 159.100.136.21 port 55884 [preauth]
Sep 17 09:41:33 nativespace-cdp sshd[3014185]: Connection closed by 159.100.136.21 port 36924 [preauth]
Sep 17 09:46:35 nativespace-cdp sshd[3015375]: Connection closed by 159.100.136.21 port 45904 [preauth]
Sep 17 09:51:33 nativespace-cdp sshd[3017105]: Connection closed by 159.100.136.21 port 55376 [preauth]
Sep 17 09:56:33 nativespace-cdp sshd[3018261]: Connection closed by 159.100.136.21 port 36658 [preauth]
Sep 17 10:01:33 nativespace-cdp sshd[3019864]: Connection closed by 159.100.136.21 port 46170 [preauth]
Sep 17 10:06:35 nativespace-cdp sshd[3021709]: Connection closed by 159.100.136.21 port 55980 [preauth]
Sep 17 10:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 10:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:22 nativespace-cdp sudo[3022546]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 10:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:22 nativespace-cdp sudo[3022551]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 10:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:23 nativespace-cdp sudo[3022556]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 10:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:23 nativespace-cdp sudo[3022564]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 10:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022570]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 10:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022582]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 10:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022588]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 10:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022593]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 10:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022598]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 10:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022603]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 10:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:25 nativespace-cdp sudo[3022609]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 10:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:27 nativespace-cdp sudo[3022626]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 10:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:27 nativespace-cdp sudo[3022634]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=chrisdal user-2=mcdermos user-3=david user-4=nbhavers user-5=careers user-6=tomandle user-7=jennimil user-8=ranxterc user-9=outdoorc user-10=hodgsonmail user-11=branko user-12=romaldki user-13=lucy user-14=attlebor user-15=onlycont user-16=bakery user-17=crrtipdl user-18=sosevalu user-19=nove user-20=boldover user-21=stagingerris user-22=dancinggardener user-23=ladburyp user-24=kategilpin user-25=design user-26=oubpgvbx user-27=tstardom user-28=what user-29=havantho user-30=sketchy user-31=cath user-32=nvihkvu user-33=bwppodcast user-34=zebrapho user-35=steve user-36=asandcoc user-37=sibtoncc user-38=beauty user-39=darkstar user-40=eatspam user-41=dhyana user-42=fawcettd user-43=burydropin user-44=nsceres user-45=smrszyqg user-46=isleofwi user-47=nomistakes user-48=hidden user-49=tigerlet
Sep 17 10:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=barbersh user-51=nscdp user-52=foods user-53=leftie user-54=fortunaz user-55=health2045 user-56=lkpier user-57=firstre5 user-58=steakbridieme user-59=donnychicago user-60=philmcph user-61=ctedorgu user-62=hirefootballgame user-63=eugincou user-64=courseme user-65=cambria1 user-66=cathski user-67=ninejimm user-68=reliable user-69=cwsocial user-70=pugwash user-71=howardon user-72=paulmca1 user-73=clarkass user-74=firstrel user-75=costestimatorco user-76=firstred user-77=highlegh user-78=southlon user-79=ultbcrra user-80=jonhartl user-81=seftvta user-82=firstres user-83=coursemc user-84=opaiscyx user-85=accooper user-86=ianrayne user-87=connectedshoppin user-88=thqkgnbz user-89=milloyco user-90=gilpin user-91=elecleis user-92=hubmaster user-93=fetch user-94=carsinyo user-95=bedfords user-96=newstoda user-97=belle user-98=ggaaorgu user-99=bemadonn user-100=nstriton user-101=brighto1 user-102=vivienn1
Sep 17 10:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=oneoarco user-105=battlere user-106=innovat1 user-107=askhform user-108=stuartge user-109=nativene user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=booff user-114=markward user-115=foundation user-116=vantagep user-117=connect9 user-118=athenare user-119=lbscrmod user-120=maflemin user-121=agproduc user-122=still user-123=stephani user-124=leereyn1 user-125=jarvisin user-126=spectrum user-127=hodgesonweb user-128=theblack user-129=wilsonsw user-130=megacards user-131=musorguk user-132=brmrjxl user-133=lakesan1 user-134=strathar user-135=atestord user-136=sarafoundation user-137=hhdugcor user-138=lbhyisi user-139=magichat user-140=martsblo user-141=dickemery123 user-142=ptkxhsbt feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 10:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 10:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:28 nativespace-cdp sudo[3022640]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:29 nativespace-cdp sudo[3022649]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-txwY2v5TgS07RxmG.~
Sep 17 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:29 nativespace-cdp sudo[3022654]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-txwY2v5TgS07RxmG.~'
Sep 17 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:29 nativespace-cdp sudo[3022658]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-txwY2v5TgS07RxmG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:29 nativespace-cdp sudo[3022664]: pam_unix(sudo:session): session closed for user root
Sep 17 10:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 10:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 10:09:29 nativespace-cdp sudo[3022669]: pam_unix(sudo:session): session closed for user root
Sep 17 10:11:36 nativespace-cdp sshd[3023496]: Connection closed by 159.100.136.21 port 37060 [preauth]
Sep 17 10:11:53 nativespace-cdp sshd[3023550]: Invalid user test1 from 107.173.83.181 port 51408
Sep 17 10:11:53 nativespace-cdp sshd[3023550]: input_userauth_request: invalid user test1 [preauth]
Sep 17 10:11:53 nativespace-cdp sshd[3023550]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:11:53 nativespace-cdp sshd[3023550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.83.181
Sep 17 10:11:54 nativespace-cdp sshd[3023550]: Failed password for invalid user test1 from 107.173.83.181 port 51408 ssh2
Sep 17 10:11:54 nativespace-cdp sshd[3023550]: Received disconnect from 107.173.83.181 port 51408:11: Bye Bye [preauth]
Sep 17 10:11:54 nativespace-cdp sshd[3023550]: Disconnected from 107.173.83.181 port 51408 [preauth]
Sep 17 10:12:32 nativespace-cdp sshd[3023700]: Invalid user guest from 34.126.80.8 port 51926
Sep 17 10:12:32 nativespace-cdp sshd[3023700]: input_userauth_request: invalid user guest [preauth]
Sep 17 10:12:32 nativespace-cdp sshd[3023700]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:12:32 nativespace-cdp sshd[3023700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.126.80.8
Sep 17 10:12:33 nativespace-cdp sshd[3023700]: Failed password for invalid user guest from 34.126.80.8 port 51926 ssh2
Sep 17 10:12:34 nativespace-cdp sshd[3023700]: Received disconnect from 34.126.80.8 port 51926:11: Bye Bye [preauth]
Sep 17 10:12:34 nativespace-cdp sshd[3023700]: Disconnected from 34.126.80.8 port 51926 [preauth]
Sep 17 10:15:01 nativespace-cdp sshd[3024231]: Invalid user steam from 154.211.14.74 port 43242
Sep 17 10:15:01 nativespace-cdp sshd[3024231]: input_userauth_request: invalid user steam [preauth]
Sep 17 10:15:01 nativespace-cdp sshd[3024231]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:15:01 nativespace-cdp sshd[3024231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.14.74
Sep 17 10:15:03 nativespace-cdp sshd[3024231]: Failed password for invalid user steam from 154.211.14.74 port 43242 ssh2
Sep 17 10:15:03 nativespace-cdp sshd[3024231]: Received disconnect from 154.211.14.74 port 43242:11: Bye Bye [preauth]
Sep 17 10:15:03 nativespace-cdp sshd[3024231]: Disconnected from 154.211.14.74 port 43242 [preauth]
Sep 17 10:15:12 nativespace-cdp sshd[3024391]: Invalid user alex from 191.35.128.135 port 40826
Sep 17 10:15:12 nativespace-cdp sshd[3024391]: input_userauth_request: invalid user alex [preauth]
Sep 17 10:15:12 nativespace-cdp sshd[3024391]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:15:12 nativespace-cdp sshd[3024391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.35.128.135
Sep 17 10:15:14 nativespace-cdp sshd[3024391]: Failed password for invalid user alex from 191.35.128.135 port 40826 ssh2
Sep 17 10:15:16 nativespace-cdp sshd[3024391]: Received disconnect from 191.35.128.135 port 40826:11: Bye Bye [preauth]
Sep 17 10:15:16 nativespace-cdp sshd[3024391]: Disconnected from 191.35.128.135 port 40826 [preauth]
Sep 17 10:16:33 nativespace-cdp sshd[3024759]: Connection closed by 159.100.136.21 port 46270 [preauth]
Sep 17 10:16:34 nativespace-cdp sshd[3024762]: Invalid user guest from 107.173.83.181 port 41310
Sep 17 10:16:34 nativespace-cdp sshd[3024762]: input_userauth_request: invalid user guest [preauth]
Sep 17 10:16:34 nativespace-cdp sshd[3024762]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:16:34 nativespace-cdp sshd[3024762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.83.181
Sep 17 10:16:37 nativespace-cdp sshd[3024762]: Failed password for invalid user guest from 107.173.83.181 port 41310 ssh2
Sep 17 10:16:37 nativespace-cdp sshd[3024762]: Received disconnect from 107.173.83.181 port 41310:11: Bye Bye [preauth]
Sep 17 10:16:37 nativespace-cdp sshd[3024762]: Disconnected from 107.173.83.181 port 41310 [preauth]
Sep 17 10:16:46 nativespace-cdp sshd[3024790]: Invalid user student from 34.126.80.8 port 39940
Sep 17 10:16:46 nativespace-cdp sshd[3024790]: input_userauth_request: invalid user student [preauth]
Sep 17 10:16:46 nativespace-cdp sshd[3024790]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:16:46 nativespace-cdp sshd[3024790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.126.80.8
Sep 17 10:16:48 nativespace-cdp sshd[3024790]: Failed password for invalid user student from 34.126.80.8 port 39940 ssh2
Sep 17 10:16:48 nativespace-cdp sshd[3024790]: Received disconnect from 34.126.80.8 port 39940:11: Bye Bye [preauth]
Sep 17 10:16:48 nativespace-cdp sshd[3024790]: Disconnected from 34.126.80.8 port 39940 [preauth]
Sep 17 10:17:06 nativespace-cdp sshd[3024863]: Invalid user admin1 from 154.211.14.74 port 55166
Sep 17 10:17:06 nativespace-cdp sshd[3024863]: input_userauth_request: invalid user admin1 [preauth]
Sep 17 10:17:06 nativespace-cdp sshd[3024863]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:17:06 nativespace-cdp sshd[3024863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.14.74
Sep 17 10:17:07 nativespace-cdp sshd[3024863]: Failed password for invalid user admin1 from 154.211.14.74 port 55166 ssh2
Sep 17 10:17:07 nativespace-cdp sshd[3024863]: Received disconnect from 154.211.14.74 port 55166:11: Bye Bye [preauth]
Sep 17 10:17:07 nativespace-cdp sshd[3024863]: Disconnected from 154.211.14.74 port 55166 [preauth]
Sep 17 10:17:12 nativespace-cdp sshd[3024880]: Invalid user user1 from 191.35.128.135 port 52110
Sep 17 10:17:12 nativespace-cdp sshd[3024880]: input_userauth_request: invalid user user1 [preauth]
Sep 17 10:17:12 nativespace-cdp sshd[3024880]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:17:12 nativespace-cdp sshd[3024880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.35.128.135
Sep 17 10:17:13 nativespace-cdp sshd[3024880]: Failed password for invalid user user1 from 191.35.128.135 port 52110 ssh2
Sep 17 10:17:13 nativespace-cdp sshd[3024880]: Received disconnect from 191.35.128.135 port 52110:11: Bye Bye [preauth]
Sep 17 10:17:13 nativespace-cdp sshd[3024880]: Disconnected from 191.35.128.135 port 52110 [preauth]
Sep 17 10:17:19 nativespace-cdp sshd[3024897]: Invalid user alex from 107.173.83.181 port 54292
Sep 17 10:17:19 nativespace-cdp sshd[3024897]: input_userauth_request: invalid user alex [preauth]
Sep 17 10:17:19 nativespace-cdp sshd[3024897]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:17:19 nativespace-cdp sshd[3024897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.83.181
Sep 17 10:17:21 nativespace-cdp sshd[3024897]: Failed password for invalid user alex from 107.173.83.181 port 54292 ssh2
Sep 17 10:17:22 nativespace-cdp sshd[3024897]: Received disconnect from 107.173.83.181 port 54292:11: Bye Bye [preauth]
Sep 17 10:17:22 nativespace-cdp sshd[3024897]: Disconnected from 107.173.83.181 port 54292 [preauth]
Sep 17 10:17:32 nativespace-cdp sshd[3024972]: Invalid user ftptest from 34.126.80.8 port 49194
Sep 17 10:17:32 nativespace-cdp sshd[3024972]: input_userauth_request: invalid user ftptest [preauth]
Sep 17 10:17:32 nativespace-cdp sshd[3024972]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:17:32 nativespace-cdp sshd[3024972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.126.80.8
Sep 17 10:17:33 nativespace-cdp sshd[3024972]: Failed password for invalid user ftptest from 34.126.80.8 port 49194 ssh2
Sep 17 10:17:34 nativespace-cdp sshd[3024972]: Received disconnect from 34.126.80.8 port 49194:11: Bye Bye [preauth]
Sep 17 10:17:34 nativespace-cdp sshd[3024972]: Disconnected from 34.126.80.8 port 49194 [preauth]
Sep 17 10:18:04 nativespace-cdp sshd[3025189]: Invalid user ali from 191.35.128.135 port 58703
Sep 17 10:18:04 nativespace-cdp sshd[3025189]: input_userauth_request: invalid user ali [preauth]
Sep 17 10:18:04 nativespace-cdp sshd[3025189]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:18:04 nativespace-cdp sshd[3025189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.35.128.135
Sep 17 10:18:06 nativespace-cdp sshd[3025189]: Failed password for invalid user ali from 191.35.128.135 port 58703 ssh2
Sep 17 10:18:33 nativespace-cdp sshd[3025442]: Invalid user frappe from 154.211.14.74 port 39800
Sep 17 10:18:33 nativespace-cdp sshd[3025442]: input_userauth_request: invalid user frappe [preauth]
Sep 17 10:18:33 nativespace-cdp sshd[3025442]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 10:18:33 nativespace-cdp sshd[3025442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.211.14.74
Sep 17 10:18:35 nativespace-cdp sshd[3025442]: Failed password for invalid user frappe from 154.211.14.74 port 39800 ssh2
Sep 17 10:18:35 nativespace-cdp sshd[3025102]: Connection closed by 154.211.14.74 port 33366 [preauth]
Sep 17 10:18:35 nativespace-cdp sshd[3025442]: Received disconnect from 154.211.14.74 port 39800:11: Bye Bye [preauth]
Sep 17 10:18:35 nativespace-cdp sshd[3025442]: Disconnected from 154.211.14.74 port 39800 [preauth]
Sep 17 10:21:36 nativespace-cdp sshd[3026358]: Connection closed by 159.100.136.21 port 55512 [preauth]
Sep 17 10:26:34 nativespace-cdp sshd[3027643]: Connection closed by 159.100.136.21 port 36796 [preauth]
Sep 17 10:31:33 nativespace-cdp sshd[3029210]: Connection closed by 159.100.136.21 port 46356 [preauth]
Sep 17 10:36:33 nativespace-cdp sshd[3031107]: Connection closed by 159.100.136.21 port 55420 [preauth]
Sep 17 10:41:36 nativespace-cdp sshd[3032473]: Connection closed by 159.100.136.21 port 35098 [preauth]
Sep 17 10:46:33 nativespace-cdp sshd[3033796]: Connection closed by 159.100.136.21 port 44788 [preauth]
Sep 17 10:51:34 nativespace-cdp sshd[3035171]: Connection closed by 159.100.136.21 port 54026 [preauth]
Sep 17 10:56:36 nativespace-cdp sshd[3036835]: Connection closed by 159.100.136.21 port 35586 [preauth]
Sep 17 11:01:33 nativespace-cdp sshd[3038081]: Connection closed by 159.100.136.21 port 44746 [preauth]
Sep 17 11:06:34 nativespace-cdp sshd[3039984]: Connection closed by 159.100.136.21 port 54044 [preauth]
Sep 17 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:24 nativespace-cdp sudo[3040872]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:24 nativespace-cdp sudo[3040876]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:27 nativespace-cdp sudo[3040879]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 11:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:27 nativespace-cdp sudo[3040912]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 11:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:51 nativespace-cdp sudo[3040915]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:51 nativespace-cdp sudo[3041183]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:51 nativespace-cdp sudo[3041188]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:51 nativespace-cdp sudo[3041191]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:51 nativespace-cdp sudo[3041194]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:51 nativespace-cdp sudo[3041197]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:52 nativespace-cdp sudo[3041200]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 11:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:54 nativespace-cdp sudo[3041233]: pam_unix(sudo:session): session closed for user root
Sep 17 11:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 11:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:09:59 nativespace-cdp sudo[3041241]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=steve user-4=zebrapho user-5=bwppodcast user-6=nsceres user-7=fawcettd user-8=burydropin user-9=dhyana user-10=darkstar user-11=eatspam user-12=beauty user-13=firstre5 user-14=steakbridieme user-15=donnychicago user-16=philmcph user-17=ctedorgu user-18=lkpier user-19=foods user-20=leftie user-21=fortunaz user-22=health2045 user-23=nscdp user-24=barbersh user-25=tigerlet user-26=nomistakes user-27=hidden user-28=isleofwi user-29=smrszyqg user-30=cwsocial user-31=howardon user-32=paulmca1 user-33=pugwash user-34=reliable user-35=ninejimm user-36=cambria1 user-37=cathski user-38=courseme user-39=eugincou user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=david user-44=nbhavers user-45=careers user-46=mcdermos user-47=chrisdal user-48=onlycont
Sep 17 11:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=attlebor user-51=romaldki user-52=branko user-53=outdoorc user-54=ranxterc user-55=hodgsonmail user-56=boldover user-57=nove user-58=crrtipdl user-59=sosevalu user-60=bakery user-61=nvihkvu user-62=havantho user-63=cath user-64=sketchy user-65=what user-66=tstardom user-67=oubpgvbx user-68=design user-69=kategilpin user-70=stagingerris user-71=dancinggardener user-72=ladburyp user-73=lbscrmod user-74=maflemin user-75=vantagep user-76=connect9 user-77=athenare user-78=booff user-79=markward user-80=foundation user-81=ulsukarm user-82=hodgesonweb user-83=theblack user-84=spectrum user-85=jarvisin user-86=leereyn1 user-87=stephani user-88=agproduc user-89=still user-90=atestord user-91=sarafoundation user-92=strathar user-93=brmrjxl user-94=lakesan1 user-95=megacards user-96=musorguk user-97=wilsonsw user-98=ptkxhsbt user-99=dickemery123 user-100=martsblo user-101=magichat user-102=hhdugcor
Sep 17 11:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lbhyisi user-104=opaiscyx user-105=coursemc user-106=firstres user-107=ultbcrra user-108=seftvta user-109=jonhartl user-110=highlegh user-111=southlon user-112=firstred user-113=costestimatorco user-114=clarkass user-115=firstrel user-116=fetch user-117=carsinyo user-118=hubmaster user-119=elecleis user-120=gilpin user-121=milloyco user-122=thqkgnbz user-123=connectedshoppin user-124=ianrayne user-125=accooper user-126=oneoarco user-127=battlere user-128=vivienn1 user-129=firstre2 user-130=nstriton user-131=brighto1 user-132=bemadonn user-133=newstoda user-134=ggaaorgu user-135=belle user-136=bedfords user-137=skyfirec user-138=alexadmin user-139=nativene user-140=stuartge user-141=askhform user-142=innovat1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 11:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:04 nativespace-cdp sudo[3041261]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 17 11:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:07 nativespace-cdp sudo[3041439]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 17 11:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 17 11:10:08 nativespace-cdp sudo[3041445]: pam_unix(sudo:session): session closed for user onlycont
Sep 17 11:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 17 11:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:09 nativespace-cdp sudo[3041464]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 17 11:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 17 11:10:09 nativespace-cdp sudo[3041471]: pam_unix(sudo:session): session closed for user oneoarco
Sep 17 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 17 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:12 nativespace-cdp sudo[3041504]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 17 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 17 11:10:12 nativespace-cdp sudo[3041512]: pam_unix(sudo:session): session closed for user lkpier
Sep 17 11:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 17 11:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:14 nativespace-cdp sudo[3041536]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 17 11:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 17 11:10:14 nativespace-cdp sudo[3041549]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 17 11:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 17 11:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 17 11:10:14 nativespace-cdp sudo[3041561]: pam_unix(sudo:session): session closed for user oneoarco
Sep 17 11:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 17 11:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:15 nativespace-cdp sudo[3041576]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 17 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 17 11:10:15 nativespace-cdp sudo[3041586]: pam_unix(sudo:session): session closed for user fortunaz
Sep 17 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 17 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:15 nativespace-cdp sudo[3041597]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:15 nativespace-cdp sudo[3041600]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 17 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:34 nativespace-cdp sudo[3042592]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 17 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:34 nativespace-cdp sudo[3042599]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 11:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:36 nativespace-cdp sudo[3042618]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TUIfRigmq6bTjZD6.~
Sep 17 11:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:36 nativespace-cdp sudo[3042625]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TUIfRigmq6bTjZD6.~'
Sep 17 11:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:36 nativespace-cdp sudo[3042630]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TUIfRigmq6bTjZD6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 11:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:36 nativespace-cdp sudo[3042636]: pam_unix(sudo:session): session closed for user root
Sep 17 11:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 11:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 11:10:36 nativespace-cdp sudo[3042641]: pam_unix(sudo:session): session closed for user root
Sep 17 11:11:33 nativespace-cdp sshd[3043041]: Connection closed by 159.100.136.21 port 35016 [preauth]
Sep 17 11:16:36 nativespace-cdp sshd[3044292]: Connection closed by 159.100.136.21 port 44210 [preauth]
Sep 17 11:21:33 nativespace-cdp sshd[3045583]: Connection closed by 159.100.136.21 port 53632 [preauth]
Sep 17 11:26:36 nativespace-cdp sshd[3047122]: Connection closed by 159.100.136.21 port 35006 [preauth]
Sep 17 11:31:33 nativespace-cdp sshd[3048425]: Connection closed by 159.100.136.21 port 43872 [preauth]
Sep 17 11:36:33 nativespace-cdp sshd[3050353]: Connection closed by 159.100.136.21 port 51226 [preauth]
Sep 17 11:41:08 nativespace-cdp sshd[3051608]: Bad protocol version identification '\003' from 91.238.181.33 port 65510
Sep 17 11:41:33 nativespace-cdp sshd[3051698]: Connection closed by 159.100.136.21 port 59444 [preauth]
Sep 17 11:46:34 nativespace-cdp sshd[3052978]: Connection closed by 159.100.136.21 port 40842 [preauth]
Sep 17 11:51:33 nativespace-cdp sshd[3054863]: Connection closed by 159.100.136.21 port 49544 [preauth]
Sep 17 11:56:33 nativespace-cdp sshd[3056030]: Connection closed by 159.100.136.21 port 58224 [preauth]
Sep 17 12:01:33 nativespace-cdp sshd[3057390]: Connection closed by 159.100.136.21 port 38858 [preauth]
Sep 17 12:06:33 nativespace-cdp sshd[3058945]: Connection closed by 159.100.136.21 port 46718 [preauth]
Sep 17 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:22 nativespace-cdp sudo[3059707]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:22 nativespace-cdp sudo[3059716]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 12:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:23 nativespace-cdp sudo[3059721]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:23 nativespace-cdp sudo[3059757]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 12:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059766]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 12:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059779]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 12:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059784]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 12:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059788]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 12:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059794]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 12:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059801]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 12:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:26 nativespace-cdp sudo[3059807]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 12:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:28 nativespace-cdp sudo[3059817]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 12:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:28 nativespace-cdp sudo[3059823]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nove user-2=boldover user-3=sosevalu user-4=crrtipdl user-5=bakery user-6=what user-7=tstardom user-8=oubpgvbx user-9=nvihkvu user-10=cath user-11=sketchy user-12=havantho user-13=kategilpin user-14=ladburyp user-15=dancinggardener user-16=stagingerris user-17=design user-18=tomandle user-19=jennimil user-20=mcdermos user-21=chrisdal user-22=nbhavers user-23=careers user-24=david user-25=attlebor user-26=lucy user-27=onlycont user-28=branko user-29=hodgsonmail user-30=ranxterc user-31=outdoorc user-32=romaldki user-33=health2045 user-34=fortunaz user-35=foods user-36=leftie user-37=nscdp user-38=ctedorgu user-39=philmcph user-40=steakbridieme user-41=firstre5 user-42=donnychicago user-43=lkpier user-44=smrszyqg user-45=isleofwi user-46=barbersh user-47=tigerlet user-48=hidden user-49=nomistakes
Sep 17 12:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=ninejimm user-51=reliable user-52=cambria1 user-53=cathski user-54=pugwash user-55=paulmca1 user-56=howardon user-57=cwsocial user-58=hirefootballgame user-59=courseme user-60=eugincou user-61=sibtoncc user-62=asandcoc user-63=zebrapho user-64=bwppodcast user-65=steve user-66=burydropin user-67=fawcettd user-68=nsceres user-69=eatspam user-70=darkstar user-71=beauty user-72=dhyana user-73=brighto1 user-74=nstriton user-75=battlere user-76=oneoarco user-77=firstre2 user-78=vivienn1 user-79=bedfords user-80=bemadonn user-81=belle user-82=ggaaorgu user-83=newstoda user-84=skyfirec user-85=alexadmin user-86=stuartge user-87=askhform user-88=innovat1 user-89=nativene user-90=firstres user-91=seftvta user-92=jonhartl user-93=ultbcrra user-94=coursemc user-95=opaiscyx user-96=costestimatorco user-97=clarkass user-98=firstrel user-99=southlon user-100=highlegh user-101=firstred user-102=elecleis user-103=milloyco
Sep 17 12:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=gilpin user-105=carsinyo user-106=fetch user-107=hubmaster user-108=ianrayne user-109=accooper user-110=thqkgnbz user-111=connectedshoppin user-112=lakesan1 user-113=brmrjxl user-114=sarafoundation user-115=atestord user-116=strathar user-117=wilsonsw user-118=musorguk user-119=megacards user-120=martsblo user-121=ptkxhsbt user-122=dickemery123 user-123=lbhyisi user-124=hhdugcor user-125=magichat user-126=markward user-127=booff user-128=foundation user-129=maflemin user-130=lbscrmod user-131=athenare user-132=connect9 user-133=vantagep user-134=ulsukarm user-135=jarvisin user-136=theblack user-137=hodgesonweb user-138=spectrum user-139=still user-140=agproduc user-141=leereyn1 user-142=stephani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 12:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 12:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:29 nativespace-cdp sudo[3059829]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:29 nativespace-cdp sudo[3059844]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IeXZXwKO4NSZbSmV.~
Sep 17 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:29 nativespace-cdp sudo[3059849]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IeXZXwKO4NSZbSmV.~'
Sep 17 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:29 nativespace-cdp sudo[3059855]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IeXZXwKO4NSZbSmV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:29 nativespace-cdp sudo[3059861]: pam_unix(sudo:session): session closed for user root
Sep 17 12:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 12:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 12:09:29 nativespace-cdp sudo[3059866]: pam_unix(sudo:session): session closed for user root
Sep 17 12:11:33 nativespace-cdp sshd[3060558]: Connection closed by 159.100.136.21 port 55930 [preauth]
Sep 17 12:16:34 nativespace-cdp sshd[3061923]: Connection closed by 159.100.136.21 port 36436 [preauth]
Sep 17 12:21:34 nativespace-cdp sshd[3063881]: Connection closed by 159.100.136.21 port 45996 [preauth]
Sep 17 12:26:37 nativespace-cdp sshd[3065356]: Connection closed by 159.100.136.21 port 54370 [preauth]
Sep 17 12:31:33 nativespace-cdp sshd[3066608]: Connection closed by 159.100.136.21 port 35016 [preauth]
Sep 17 12:36:33 nativespace-cdp sshd[3068335]: Connection closed by 159.100.136.21 port 44618 [preauth]
Sep 17 12:41:33 nativespace-cdp sshd[3069558]: Connection closed by 159.100.136.21 port 53542 [preauth]
Sep 17 12:46:35 nativespace-cdp sshd[3070835]: Connection closed by 159.100.136.21 port 35248 [preauth]
Sep 17 12:51:33 nativespace-cdp sshd[3072361]: Connection closed by 159.100.136.21 port 44560 [preauth]
Sep 17 12:56:33 nativespace-cdp sshd[3073638]: Connection closed by 159.100.136.21 port 54126 [preauth]
Sep 17 12:57:50 nativespace-cdp sshd[3073957]: Invalid user guest from 159.223.87.185 port 53138
Sep 17 12:57:51 nativespace-cdp sshd[3073957]: input_userauth_request: invalid user guest [preauth]
Sep 17 12:57:51 nativespace-cdp sshd[3073957]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 12:57:51 nativespace-cdp sshd[3073957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.87.185
Sep 17 12:57:53 nativespace-cdp sshd[3073957]: Failed password for invalid user guest from 159.223.87.185 port 53138 ssh2
Sep 17 12:57:53 nativespace-cdp sshd[3073957]: Received disconnect from 159.223.87.185 port 53138:11: Bye Bye [preauth]
Sep 17 12:57:53 nativespace-cdp sshd[3073957]: Disconnected from 159.223.87.185 port 53138 [preauth]
Sep 17 13:01:05 nativespace-cdp sshd[3074842]: Invalid user ubuntu from 103.149.143.20 port 40776
Sep 17 13:01:05 nativespace-cdp sshd[3074842]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 13:01:05 nativespace-cdp sshd[3074842]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:01:05 nativespace-cdp sshd[3074842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.143.20
Sep 17 13:01:07 nativespace-cdp sshd[3074842]: Failed password for invalid user ubuntu from 103.149.143.20 port 40776 ssh2
Sep 17 13:01:07 nativespace-cdp sshd[3074842]: Received disconnect from 103.149.143.20 port 40776:11: Bye Bye [preauth]
Sep 17 13:01:07 nativespace-cdp sshd[3074842]: Disconnected from 103.149.143.20 port 40776 [preauth]
Sep 17 13:01:33 nativespace-cdp sshd[3075006]: Connection closed by 159.100.136.21 port 35142 [preauth]
Sep 17 13:02:25 nativespace-cdp sshd[3075166]: Invalid user ali from 103.149.143.20 port 57630
Sep 17 13:02:25 nativespace-cdp sshd[3075166]: input_userauth_request: invalid user ali [preauth]
Sep 17 13:02:25 nativespace-cdp sshd[3075166]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:02:25 nativespace-cdp sshd[3075166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.143.20
Sep 17 13:02:26 nativespace-cdp sshd[3075166]: Failed password for invalid user ali from 103.149.143.20 port 57630 ssh2
Sep 17 13:02:31 nativespace-cdp sshd[3075166]: Received disconnect from 103.149.143.20 port 57630:11: Bye Bye [preauth]
Sep 17 13:02:31 nativespace-cdp sshd[3075166]: Disconnected from 103.149.143.20 port 57630 [preauth]
Sep 17 13:03:18 nativespace-cdp sshd[3075708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.143.20  user=root
Sep 17 13:03:18 nativespace-cdp sshd[3075708]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 17 13:03:20 nativespace-cdp sshd[3075708]: Failed password for root from 103.149.143.20 port 13873 ssh2
Sep 17 13:03:20 nativespace-cdp sshd[3075708]: Received disconnect from 103.149.143.20 port 13873:11: Bye Bye [preauth]
Sep 17 13:03:20 nativespace-cdp sshd[3075708]: Disconnected from 103.149.143.20 port 13873 [preauth]
Sep 17 13:04:12 nativespace-cdp sshd[3076048]: Invalid user ali from 159.223.87.185 port 33600
Sep 17 13:04:12 nativespace-cdp sshd[3076048]: input_userauth_request: invalid user ali [preauth]
Sep 17 13:04:12 nativespace-cdp sshd[3076048]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:04:12 nativespace-cdp sshd[3076048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.87.185
Sep 17 13:04:14 nativespace-cdp sshd[3076048]: Failed password for invalid user ali from 159.223.87.185 port 33600 ssh2
Sep 17 13:04:14 nativespace-cdp sshd[3076048]: Received disconnect from 159.223.87.185 port 33600:11: Bye Bye [preauth]
Sep 17 13:04:14 nativespace-cdp sshd[3076048]: Disconnected from 159.223.87.185 port 33600 [preauth]
Sep 17 13:04:59 nativespace-cdp sshd[3076198]: Invalid user zhangsan from 159.223.87.185 port 48700
Sep 17 13:04:59 nativespace-cdp sshd[3076198]: input_userauth_request: invalid user zhangsan [preauth]
Sep 17 13:04:59 nativespace-cdp sshd[3076198]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:04:59 nativespace-cdp sshd[3076198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.87.185
Sep 17 13:05:01 nativespace-cdp sshd[3076198]: Failed password for invalid user zhangsan from 159.223.87.185 port 48700 ssh2
Sep 17 13:05:05 nativespace-cdp sshd[3076198]: Received disconnect from 159.223.87.185 port 48700:11: Bye Bye [preauth]
Sep 17 13:05:05 nativespace-cdp sshd[3076198]: Disconnected from 159.223.87.185 port 48700 [preauth]
Sep 17 13:06:08 nativespace-cdp sshd[3076690]: Invalid user oracle from 182.93.7.194 port 62580
Sep 17 13:06:08 nativespace-cdp sshd[3076690]: input_userauth_request: invalid user oracle [preauth]
Sep 17 13:06:08 nativespace-cdp sshd[3076690]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:06:08 nativespace-cdp sshd[3076690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 17 13:06:10 nativespace-cdp sshd[3076690]: Failed password for invalid user oracle from 182.93.7.194 port 62580 ssh2
Sep 17 13:06:10 nativespace-cdp sshd[3076690]: Received disconnect from 182.93.7.194 port 62580:11: Bye Bye [preauth]
Sep 17 13:06:10 nativespace-cdp sshd[3076690]: Disconnected from 182.93.7.194 port 62580 [preauth]
Sep 17 13:06:34 nativespace-cdp sshd[3076875]: Connection closed by 159.100.136.21 port 44580 [preauth]
Sep 17 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:09:49 nativespace-cdp sudo[3077727]: pam_unix(sudo:session): session closed for user root
Sep 17 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:09:49 nativespace-cdp sudo[3077733]: pam_unix(sudo:session): session closed for user root
Sep 17 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:06 nativespace-cdp sudo[3077736]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 13:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:07 nativespace-cdp sudo[3077908]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 13:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077913]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 13:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077943]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 13:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077947]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 13:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077950]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 13:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077953]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 13:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077957]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 13:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:13 nativespace-cdp sudo[3077962]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:16 nativespace-cdp sudo[3078028]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:19 nativespace-cdp sudo[3078032]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=romaldki user-2=branko user-3=outdoorc user-4=hodgsonmail user-5=ranxterc user-6=onlycont user-7=attlebor user-8=lucy user-9=careers user-10=nbhavers user-11=david user-12=mcdermos user-13=chrisdal user-14=jennimil user-15=tomandle user-16=design user-17=kategilpin user-18=ladburyp user-19=stagingerris user-20=dancinggardener user-21=nvihkvu user-22=cath user-23=sketchy user-24=havantho user-25=what user-26=tstardom user-27=oubpgvbx user-28=sosevalu user-29=crrtipdl user-30=bakery user-31=boldover user-32=nove user-33=dhyana user-34=eatspam user-35=darkstar user-36=beauty user-37=nsceres user-38=burydropin user-39=fawcettd user-40=steve user-41=zebrapho user-42=bwppodcast user-43=sibtoncc user-44=asandcoc user-45=courseme user-46=eugincou user-47=hirefootballgame user-48=paulmca1
Sep 17 13:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=howardon user-50=pugwash user-51=cwsocial user-52=reliable user-53=ninejimm user-54=cathski user-55=cambria1 user-56=barbersh user-57=tigerlet user-58=hidden user-59=nomistakes user-60=smrszyqg user-61=isleofwi user-62=philmcph user-63=ctedorgu user-64=donnychicago user-65=steakbridieme user-66=firstre5 user-67=lkpier user-68=health2045 user-69=fortunaz user-70=foods user-71=leftie user-72=nscdp user-73=thqkgnbz user-74=connectedshoppin user-75=ianrayne user-76=accooper user-77=carsinyo user-78=fetch user-79=hubmaster user-80=elecleis user-81=gilpin user-82=milloyco user-83=southlon user-84=highlegh user-85=firstred user-86=costestimatorco user-87=firstrel user-88=clarkass user-89=coursemc user-90=opaiscyx user-91=firstres user-92=seftvta user-93=jonhartl user-94=ultbcrra user-95=nativene user-96=askhform user-97=stuartge user-98=innovat1 user-99=alexadmin user-100=skyfirec user-101=bemadonn
Sep 17 13:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=ggaaorgu user-103=belle user-104=newstoda user-105=bedfords user-106=battlere user-107=oneoarco user-108=firstre2 user-109=vivienn1 user-110=brighto1 user-111=nstriton user-112=leereyn1 user-113=stephani user-114=still user-115=agproduc user-116=theblack user-117=hodgesonweb user-118=spectrum user-119=jarvisin user-120=ulsukarm user-121=maflemin user-122=lbscrmod user-123=athenare user-124=connect9 user-125=vantagep user-126=markward user-127=booff user-128=foundation user-129=magichat user-130=lbhyisi user-131=hhdugcor user-132=ptkxhsbt user-133=dickemery123 user-134=martsblo user-135=musorguk user-136=megacards user-137=wilsonsw user-138=sarafoundation user-139=atestord user-140=strathar user-141=lakesan1 user-142=brmrjxl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 17 13:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:21 nativespace-cdp sudo[3078048]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 13:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:23 nativespace-cdp sudo[3078067]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-D2CsfsJCmQY1PT7O.~
Sep 17 13:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:23 nativespace-cdp sudo[3078070]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-D2CsfsJCmQY1PT7O.~'
Sep 17 13:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:23 nativespace-cdp sudo[3078074]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-D2CsfsJCmQY1PT7O.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 13:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:23 nativespace-cdp sudo[3078078]: pam_unix(sudo:session): session closed for user root
Sep 17 13:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 13:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 13:10:23 nativespace-cdp sudo[3078081]: pam_unix(sudo:session): session closed for user root
Sep 17 13:11:35 nativespace-cdp sshd[3078637]: Connection closed by 159.100.136.21 port 52160 [preauth]
Sep 17 13:11:37 nativespace-cdp sshd[3078653]: Connection closed by 182.93.7.194 port 49818 [preauth]
Sep 17 13:13:03 nativespace-cdp sshd[3079205]: Invalid user reza from 182.93.7.194 port 41348
Sep 17 13:13:03 nativespace-cdp sshd[3079205]: input_userauth_request: invalid user reza [preauth]
Sep 17 13:13:03 nativespace-cdp sshd[3079205]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:13:03 nativespace-cdp sshd[3079205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 17 13:13:05 nativespace-cdp sshd[3079205]: Failed password for invalid user reza from 182.93.7.194 port 41348 ssh2
Sep 17 13:13:06 nativespace-cdp sshd[3079205]: Received disconnect from 182.93.7.194 port 41348:11: Bye Bye [preauth]
Sep 17 13:13:06 nativespace-cdp sshd[3079205]: Disconnected from 182.93.7.194 port 41348 [preauth]
Sep 17 13:14:29 nativespace-cdp sshd[3079675]: Invalid user frappe from 182.93.7.194 port 40886
Sep 17 13:14:29 nativespace-cdp sshd[3079675]: input_userauth_request: invalid user frappe [preauth]
Sep 17 13:14:29 nativespace-cdp sshd[3079675]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 13:14:29 nativespace-cdp sshd[3079675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 17 13:14:31 nativespace-cdp sshd[3079675]: Failed password for invalid user frappe from 182.93.7.194 port 40886 ssh2
Sep 17 13:14:31 nativespace-cdp sshd[3079675]: Received disconnect from 182.93.7.194 port 40886:11: Bye Bye [preauth]
Sep 17 13:14:31 nativespace-cdp sshd[3079675]: Disconnected from 182.93.7.194 port 40886 [preauth]
Sep 17 13:16:33 nativespace-cdp sshd[3080765]: Connection closed by 159.100.136.21 port 33694 [preauth]
Sep 17 13:21:34 nativespace-cdp sshd[3083407]: Connection closed by 159.100.136.21 port 42730 [preauth]
Sep 17 13:26:33 nativespace-cdp sshd[3086284]: Connection closed by 159.100.136.21 port 52006 [preauth]
Sep 17 13:31:33 nativespace-cdp sshd[3089268]: Connection closed by 159.100.136.21 port 33258 [preauth]
Sep 17 13:36:33 nativespace-cdp sshd[3091933]: Connection closed by 159.100.136.21 port 43072 [preauth]
Sep 17 13:41:33 nativespace-cdp sshd[3093238]: Connection closed by 159.100.136.21 port 52096 [preauth]
Sep 17 13:46:33 nativespace-cdp sshd[3094479]: Connection closed by 159.100.136.21 port 33226 [preauth]
Sep 17 13:51:33 nativespace-cdp sshd[3096213]: Connection closed by 159.100.136.21 port 41838 [preauth]
Sep 17 13:56:33 nativespace-cdp sshd[3097337]: Connection closed by 159.100.136.21 port 50602 [preauth]
Sep 17 14:01:34 nativespace-cdp sshd[3098624]: Connection closed by 159.100.136.21 port 59808 [preauth]
Sep 17 14:06:33 nativespace-cdp sshd[3100384]: Connection closed by 159.100.136.21 port 41034 [preauth]
Sep 17 14:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 14:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:24 nativespace-cdp sudo[3100975]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 14:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:24 nativespace-cdp sudo[3100979]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 14:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:26 nativespace-cdp sudo[3100984]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 14:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:26 nativespace-cdp sudo[3100994]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 14:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101000]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 14:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101014]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 14:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101019]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 14:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101023]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 14:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101029]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 14:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101034]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 14:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:29 nativespace-cdp sudo[3101040]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 14:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:37 nativespace-cdp sudo[3101068]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 14:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:38 nativespace-cdp sudo[3101074]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=askhform user-4=stuartge user-5=innovat1 user-6=nativene user-7=brighto1 user-8=nstriton user-9=battlere user-10=oneoarco user-11=firstre2 user-12=vivienn1 user-13=bedfords user-14=bemadonn user-15=ggaaorgu user-16=belle user-17=newstoda user-18=elecleis user-19=gilpin user-20=milloyco user-21=carsinyo user-22=fetch user-23=hubmaster user-24=ianrayne user-25=accooper user-26=thqkgnbz user-27=connectedshoppin user-28=firstres user-29=jonhartl user-30=seftvta user-31=ultbcrra user-32=opaiscyx user-33=coursemc user-34=costestimatorco user-35=clarkass user-36=firstrel user-37=southlon user-38=highlegh user-39=firstred user-40=martsblo user-41=ptkxhsbt user-42=dickemery123 user-43=lbhyisi user-44=hhdugcor user-45=magichat user-46=lakesan1 user-47=brmrjxl
Sep 17 14:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=sarafoundation user-49=atestord user-50=strathar user-51=wilsonsw user-52=musorguk user-53=megacards user-54=jarvisin user-55=hodgesonweb user-56=theblack user-57=spectrum user-58=still user-59=agproduc user-60=leereyn1 user-61=stephani user-62=booff user-63=foundation user-64=markward user-65=maflemin user-66=lbscrmod user-67=athenare user-68=connect9 user-69=vantagep user-70=ulsukarm user-71=what user-72=oubpgvbx user-73=tstardom user-74=nvihkvu user-75=sketchy user-76=cath user-77=havantho user-78=kategilpin user-79=ladburyp user-80=dancinggardener user-81=stagingerris user-82=design user-83=nove user-84=boldover user-85=sosevalu user-86=crrtipdl user-87=bakery user-88=attlebor user-89=lucy user-90=onlycont user-91=branko user-92=outdoorc user-93=hodgsonmail user-94=ranxterc user-95=romaldki user-96=tomandle user-97=jennimil user-98=mcdermos user-99=chrisdal user-100=nbhavers user-101=careers
Sep 17 14:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=david user-103=reliable user-104=ninejimm user-105=cambria1 user-106=cathski user-107=pugwash user-108=paulmca1 user-109=howardon user-110=cwsocial user-111=hirefootballgame user-112=courseme user-113=eugincou user-114=fortunaz user-115=health2045 user-116=foods user-117=leftie user-118=nscdp user-119=philmcph user-120=ctedorgu user-121=firstre5 user-122=steakbridieme user-123=donnychicago user-124=lkpier user-125=isleofwi user-126=smrszyqg user-127=tigerlet user-128=barbersh user-129=hidden user-130=nomistakes user-131=burydropin user-132=fawcettd user-133=nsceres user-134=eatspam user-135=darkstar user-136=beauty user-137=dhyana user-138=asandcoc user-139=sibtoncc user-140=zebrapho user-141=bwppodcast user-142=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 17 14:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:39 nativespace-cdp sudo[3101083]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:39 nativespace-cdp sudo[3101101]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V1gXzg4jNfliLxqp.~
Sep 17 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:39 nativespace-cdp sudo[3101106]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V1gXzg4jNfliLxqp.~'
Sep 17 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:39 nativespace-cdp sudo[3101110]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V1gXzg4jNfliLxqp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:39 nativespace-cdp sudo[3101116]: pam_unix(sudo:session): session closed for user root
Sep 17 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 14:09:39 nativespace-cdp sudo[3101121]: pam_unix(sudo:session): session closed for user root
Sep 17 14:11:35 nativespace-cdp sshd[3101630]: Connection closed by 159.100.136.21 port 50084 [preauth]
Sep 17 14:16:36 nativespace-cdp sshd[3102869]: Connection closed by 159.100.136.21 port 59340 [preauth]
Sep 17 14:21:33 nativespace-cdp sshd[3104626]: Connection closed by 159.100.136.21 port 40612 [preauth]
Sep 17 14:26:33 nativespace-cdp sshd[3105757]: Connection closed by 159.100.136.21 port 49772 [preauth]
Sep 17 14:31:34 nativespace-cdp sshd[3107122]: Connection closed by 159.100.136.21 port 59254 [preauth]
Sep 17 14:41:33 nativespace-cdp sshd[3110300]: Connection closed by 159.100.136.21 port 50152 [preauth]
Sep 17 14:46:33 nativespace-cdp sshd[3111524]: Connection closed by 159.100.136.21 port 59780 [preauth]
Sep 17 14:51:33 nativespace-cdp sshd[3113176]: Connection closed by 159.100.136.21 port 40418 [preauth]
Sep 17 14:56:33 nativespace-cdp sshd[3114447]: Connection closed by 159.100.136.21 port 49404 [preauth]
Sep 17 15:01:33 nativespace-cdp sshd[3115618]: Connection closed by 159.100.136.21 port 57160 [preauth]
Sep 17 15:06:34 nativespace-cdp sshd[3117930]: Connection closed by 159.100.136.21 port 38176 [preauth]
Sep 17 15:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 15:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:23 nativespace-cdp sudo[3118596]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 15:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:23 nativespace-cdp sudo[3118600]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 15:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:24 nativespace-cdp sudo[3118605]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 15:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:24 nativespace-cdp sudo[3118613]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 15:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118619]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118635]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118640]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118644]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118649]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118654]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 15:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:27 nativespace-cdp sudo[3118660]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 15:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:29 nativespace-cdp sudo[3118674]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 15:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:30 nativespace-cdp sudo[3118680]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sketchy user-2=cath user-3=havantho user-4=nvihkvu user-5=oubpgvbx user-6=tstardom user-7=what user-8=design user-9=ladburyp user-10=stagingerris user-11=dancinggardener user-12=kategilpin user-13=boldover user-14=nove user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=onlycont user-19=attlebor user-20=lucy user-21=romaldki user-22=ranxterc user-23=outdoorc user-24=hodgsonmail user-25=branko user-26=jennimil user-27=tomandle user-28=nbhavers user-29=careers user-30=david user-31=chrisdal user-32=mcdermos user-33=paulmca1 user-34=howardon user-35=pugwash user-36=cwsocial user-37=cathski user-38=cambria1 user-39=ninejimm user-40=reliable user-41=eugincou user-42=courseme user-43=hirefootballgame user-44=lkpier user-45=ctedorgu user-46=philmcph user-47=firstre5 user-48=donnychicago
Sep 17 15:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=steakbridieme user-50=nscdp user-51=health2045 user-52=fortunaz user-53=leftie user-54=foods user-55=hidden user-56=nomistakes user-57=tigerlet user-58=barbersh user-59=isleofwi user-60=smrszyqg user-61=nsceres user-62=burydropin user-63=fawcettd user-64=dhyana user-65=beauty user-66=eatspam user-67=darkstar user-68=sibtoncc user-69=asandcoc user-70=steve user-71=bwppodcast user-72=zebrapho user-73=skyfirec user-74=alexadmin user-75=nativene user-76=innovat1 user-77=askhform user-78=stuartge user-79=firstre2 user-80=vivienn1 user-81=battlere user-82=oneoarco user-83=brighto1 user-84=nstriton user-85=ggaaorgu user-86=belle user-87=newstoda user-88=bemadonn user-89=bedfords user-90=hubmaster user-91=carsinyo user-92=fetch user-93=milloyco user-94=gilpin user-95=elecleis user-96=connectedshoppin user-97=thqkgnbz user-98=accooper user-99=ianrayne user-100=coursemc user-101=opaiscyx user-102=jonhartl
Sep 17 15:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=seftvta user-104=ultbcrra user-105=firstres user-106=firstred user-107=southlon user-108=highlegh user-109=clarkass user-110=firstrel user-111=costestimatorco user-112=dickemery123 user-113=ptkxhsbt user-114=martsblo user-115=magichat user-116=lbhyisi user-117=hhdugcor user-118=strathar user-119=sarafoundation user-120=atestord user-121=lakesan1 user-122=brmrjxl user-123=musorguk user-124=megacards user-125=wilsonsw user-126=spectrum user-127=hodgesonweb user-128=theblack user-129=jarvisin user-130=stephani user-131=leereyn1 user-132=still user-133=agproduc user-134=athenare user-135=connect9 user-136=vantagep user-137=maflemin user-138=lbscrmod user-139=booff user-140=foundation user-141=markward user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 17 15:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 15:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:31 nativespace-cdp sudo[3118687]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:31 nativespace-cdp sudo[3118695]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4XgiHbvvDrwD9h0a.~
Sep 17 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:31 nativespace-cdp sudo[3118700]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4XgiHbvvDrwD9h0a.~'
Sep 17 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:31 nativespace-cdp sudo[3118704]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4XgiHbvvDrwD9h0a.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:31 nativespace-cdp sudo[3118710]: pam_unix(sudo:session): session closed for user root
Sep 17 15:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 15:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 15:09:31 nativespace-cdp sudo[3118715]: pam_unix(sudo:session): session closed for user root
Sep 17 15:16:33 nativespace-cdp sshd[3120460]: Connection closed by 159.100.136.21 port 55784 [preauth]
Sep 17 15:21:33 nativespace-cdp sshd[3121714]: Connection closed by 159.100.136.21 port 35920 [preauth]
Sep 17 15:26:33 nativespace-cdp sshd[3123356]: Connection closed by 159.100.136.21 port 44754 [preauth]
Sep 17 15:31:33 nativespace-cdp sshd[3124610]: Connection closed by 159.100.136.21 port 53808 [preauth]
Sep 17 15:36:35 nativespace-cdp sshd[3125911]: Connection closed by 159.100.136.21 port 35086 [preauth]
Sep 17 15:41:33 nativespace-cdp sshd[3127516]: Connection closed by 159.100.136.21 port 44042 [preauth]
Sep 17 15:46:33 nativespace-cdp sshd[3128652]: Connection closed by 159.100.136.21 port 53452 [preauth]
Sep 17 15:51:33 nativespace-cdp sshd[3130253]: Connection closed by 159.100.136.21 port 34070 [preauth]
Sep 17 15:56:33 nativespace-cdp sshd[3131369]: Connection closed by 159.100.136.21 port 43784 [preauth]
Sep 17 16:01:33 nativespace-cdp sshd[3132636]: Connection closed by 159.100.136.21 port 53266 [preauth]
Sep 17 16:06:33 nativespace-cdp sshd[3134659]: Connection closed by 159.100.136.21 port 34218 [preauth]
Sep 17 16:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 16:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:20 nativespace-cdp sudo[3135254]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 16:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:20 nativespace-cdp sudo[3135259]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 16:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:21 nativespace-cdp sudo[3135264]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 16:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:21 nativespace-cdp sudo[3135272]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 16:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135278]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135288]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135293]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135297]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135302]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135307]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 16:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:23 nativespace-cdp sudo[3135313]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 16:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:34 nativespace-cdp sudo[3135343]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 16:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:35 nativespace-cdp sudo[3135349]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstred user-2=southlon user-3=highlegh user-4=firstrel user-5=clarkass user-6=costestimatorco user-7=coursemc user-8=opaiscyx user-9=seftvta user-10=jonhartl user-11=ultbcrra user-12=firstres user-13=connectedshoppin user-14=thqkgnbz user-15=accooper user-16=ianrayne user-17=hubmaster user-18=carsinyo user-19=fetch user-20=milloyco user-21=gilpin user-22=elecleis user-23=ggaaorgu user-24=belle user-25=newstoda user-26=bemadonn user-27=bedfords user-28=firstre2 user-29=vivienn1 user-30=battlere user-31=oneoarco user-32=brighto1 user-33=nstriton user-34=nativene user-35=innovat1 user-36=askhform user-37=stuartge user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=connect9 user-42=athenare user-43=vantagep user-44=maflemin user-45=lbscrmod user-46=booff user-47=foundation user-48=markward
Sep 17 16:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stephani user-50=leereyn1 user-51=still user-52=agproduc user-53=spectrum user-54=hodgesonweb user-55=theblack user-56=jarvisin user-57=musorguk user-58=megacards user-59=wilsonsw user-60=strathar user-61=sarafoundation user-62=atestord user-63=lakesan1 user-64=brmrjxl user-65=magichat user-66=lbhyisi user-67=hhdugcor user-68=dickemery123 user-69=ptkxhsbt user-70=martsblo user-71=careers user-72=nbhavers user-73=david user-74=chrisdal user-75=mcdermos user-76=jennimil user-77=tomandle user-78=romaldki user-79=hodgsonmail user-80=outdoorc user-81=ranxterc user-82=branko user-83=onlycont user-84=attlebor user-85=lucy user-86=bakery user-87=sosevalu user-88=crrtipdl user-89=boldover user-90=nove user-91=design user-92=ladburyp user-93=stagingerris user-94=dancinggardener user-95=kategilpin user-96=cath user-97=sketchy user-98=havantho user-99=nvihkvu user-100=tstardom user-101=oubpgvbx user-102=what
Sep 17 16:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=steve user-104=bwppodcast user-105=zebrapho user-106=sibtoncc user-107=asandcoc user-108=dhyana user-109=beauty user-110=eatspam user-111=darkstar user-112=nsceres user-113=burydropin user-114=fawcettd user-115=hidden user-116=nomistakes user-117=tigerlet user-118=barbersh user-119=smrszyqg user-120=isleofwi user-121=lkpier user-122=philmcph user-123=ctedorgu user-124=steakbridieme user-125=firstre5 user-126=donnychicago user-127=nscdp user-128=health2045 user-129=fortunaz user-130=leftie user-131=foods user-132=eugincou user-133=courseme user-134=hirefootballgame user-135=paulmca1 user-136=pugwash user-137=howardon user-138=cwsocial user-139=cambria1 user-140=cathski user-141=reliable user-142=ninejimm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 16:09:35 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 16:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:36 nativespace-cdp sudo[3135356]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:36 nativespace-cdp sudo[3135377]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-N1HNLAP5bYkAr5RC.~
Sep 17 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:36 nativespace-cdp sudo[3135384]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-N1HNLAP5bYkAr5RC.~'
Sep 17 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:36 nativespace-cdp sudo[3135388]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-N1HNLAP5bYkAr5RC.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:36 nativespace-cdp sudo[3135395]: pam_unix(sudo:session): session closed for user root
Sep 17 16:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 16:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 16:09:36 nativespace-cdp sudo[3135400]: pam_unix(sudo:session): session closed for user root
Sep 17 16:11:40 nativespace-cdp sshd[3135935]: Connection closed by 159.100.136.21 port 43590 [preauth]
Sep 17 16:16:33 nativespace-cdp sshd[3137005]: Connection closed by 159.100.136.21 port 52972 [preauth]
Sep 17 16:21:36 nativespace-cdp sshd[3138095]: Connection closed by 159.100.136.21 port 33980 [preauth]
Sep 17 16:26:35 nativespace-cdp sshd[3139302]: Connection closed by 159.100.136.21 port 43850 [preauth]
Sep 17 16:31:33 nativespace-cdp sshd[3140698]: Connection closed by 159.100.136.21 port 53526 [preauth]
Sep 17 16:36:33 nativespace-cdp sshd[3142294]: Connection closed by 159.100.136.21 port 34602 [preauth]
Sep 17 16:41:33 nativespace-cdp sshd[3143659]: Connection closed by 159.100.136.21 port 43840 [preauth]
Sep 17 16:44:26 nativespace-cdp sshd[3144223]: Invalid user guest from 57.128.172.114 port 34658
Sep 17 16:44:26 nativespace-cdp sshd[3144223]: input_userauth_request: invalid user guest [preauth]
Sep 17 16:44:26 nativespace-cdp sshd[3144223]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:44:26 nativespace-cdp sshd[3144223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.128.172.114
Sep 17 16:44:29 nativespace-cdp sshd[3144223]: Failed password for invalid user guest from 57.128.172.114 port 34658 ssh2
Sep 17 16:44:30 nativespace-cdp sshd[3144223]: Received disconnect from 57.128.172.114 port 34658:11: Bye Bye [preauth]
Sep 17 16:44:30 nativespace-cdp sshd[3144223]: Disconnected from 57.128.172.114 port 34658 [preauth]
Sep 17 16:45:04 nativespace-cdp sshd[3144457]: Invalid user azureadmin from 68.178.206.226 port 38024
Sep 17 16:45:04 nativespace-cdp sshd[3144457]: input_userauth_request: invalid user azureadmin [preauth]
Sep 17 16:45:04 nativespace-cdp sshd[3144457]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:45:04 nativespace-cdp sshd[3144457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.178.206.226
Sep 17 16:45:05 nativespace-cdp sshd[3144457]: Failed password for invalid user azureadmin from 68.178.206.226 port 38024 ssh2
Sep 17 16:45:06 nativespace-cdp sshd[3144457]: Received disconnect from 68.178.206.226 port 38024:11: Bye Bye [preauth]
Sep 17 16:45:06 nativespace-cdp sshd[3144457]: Disconnected from 68.178.206.226 port 38024 [preauth]
Sep 17 16:45:32 nativespace-cdp sshd[3144598]: Invalid user postgres from 206.189.141.87 port 34886
Sep 17 16:45:32 nativespace-cdp sshd[3144598]: input_userauth_request: invalid user postgres [preauth]
Sep 17 16:45:32 nativespace-cdp sshd[3144598]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:45:32 nativespace-cdp sshd[3144598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.141.87
Sep 17 16:45:34 nativespace-cdp sshd[3144598]: Failed password for invalid user postgres from 206.189.141.87 port 34886 ssh2
Sep 17 16:45:35 nativespace-cdp sshd[3144598]: Received disconnect from 206.189.141.87 port 34886:11: Bye Bye [preauth]
Sep 17 16:45:35 nativespace-cdp sshd[3144598]: Disconnected from 206.189.141.87 port 34886 [preauth]
Sep 17 16:46:08 nativespace-cdp sshd[3144701]: Invalid user db2fenc1 from 142.44.241.112 port 55112
Sep 17 16:46:08 nativespace-cdp sshd[3144701]: input_userauth_request: invalid user db2fenc1 [preauth]
Sep 17 16:46:08 nativespace-cdp sshd[3144701]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:46:08 nativespace-cdp sshd[3144701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.241.112
Sep 17 16:46:10 nativespace-cdp sshd[3144701]: Failed password for invalid user db2fenc1 from 142.44.241.112 port 55112 ssh2
Sep 17 16:46:10 nativespace-cdp sshd[3144701]: Received disconnect from 142.44.241.112 port 55112:11: Bye Bye [preauth]
Sep 17 16:46:10 nativespace-cdp sshd[3144701]: Disconnected from 142.44.241.112 port 55112 [preauth]
Sep 17 16:46:22 nativespace-cdp sshd[3144729]: Invalid user test from 190.145.200.210 port 41674
Sep 17 16:46:22 nativespace-cdp sshd[3144729]: input_userauth_request: invalid user test [preauth]
Sep 17 16:46:22 nativespace-cdp sshd[3144729]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:46:22 nativespace-cdp sshd[3144729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.200.210
Sep 17 16:46:24 nativespace-cdp sshd[3144729]: Failed password for invalid user test from 190.145.200.210 port 41674 ssh2
Sep 17 16:46:24 nativespace-cdp sshd[3144729]: Received disconnect from 190.145.200.210 port 41674:11: Bye Bye [preauth]
Sep 17 16:46:24 nativespace-cdp sshd[3144729]: Disconnected from 190.145.200.210 port 41674 [preauth]
Sep 17 16:46:33 nativespace-cdp sshd[3144771]: Connection closed by 159.100.136.21 port 53116 [preauth]
Sep 17 16:47:24 nativespace-cdp sshd[3144906]: Invalid user db2fenc1 from 197.157.17.151 port 46248
Sep 17 16:47:24 nativespace-cdp sshd[3144906]: input_userauth_request: invalid user db2fenc1 [preauth]
Sep 17 16:47:24 nativespace-cdp sshd[3144906]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:47:24 nativespace-cdp sshd[3144906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.157.17.151
Sep 17 16:47:27 nativespace-cdp sshd[3144906]: Failed password for invalid user db2fenc1 from 197.157.17.151 port 46248 ssh2
Sep 17 16:47:27 nativespace-cdp sshd[3144906]: Received disconnect from 197.157.17.151 port 46248:11: Bye Bye [preauth]
Sep 17 16:47:27 nativespace-cdp sshd[3144906]: Disconnected from 197.157.17.151 port 46248 [preauth]
Sep 17 16:49:05 nativespace-cdp sshd[3145582]: Invalid user ubuntu from 189.195.113.27 port 40536
Sep 17 16:49:05 nativespace-cdp sshd[3145582]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 16:49:05 nativespace-cdp sshd[3145582]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:49:05 nativespace-cdp sshd[3145582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.113.27
Sep 17 16:49:07 nativespace-cdp sshd[3145582]: Failed password for invalid user ubuntu from 189.195.113.27 port 40536 ssh2
Sep 17 16:49:07 nativespace-cdp sshd[3145582]: Received disconnect from 189.195.113.27 port 40536:11: Bye Bye [preauth]
Sep 17 16:49:07 nativespace-cdp sshd[3145582]: Disconnected from 189.195.113.27 port 40536 [preauth]
Sep 17 16:49:33 nativespace-cdp sshd[3145659]: Invalid user debian from 86.139.87.32 port 34343
Sep 17 16:49:33 nativespace-cdp sshd[3145659]: input_userauth_request: invalid user debian [preauth]
Sep 17 16:49:33 nativespace-cdp sshd[3145659]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:49:33 nativespace-cdp sshd[3145659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.139.87.32
Sep 17 16:49:35 nativespace-cdp sshd[3145659]: Failed password for invalid user debian from 86.139.87.32 port 34343 ssh2
Sep 17 16:49:35 nativespace-cdp sshd[3145659]: Received disconnect from 86.139.87.32 port 34343:11: Bye Bye [preauth]
Sep 17 16:49:35 nativespace-cdp sshd[3145659]: Disconnected from 86.139.87.32 port 34343 [preauth]
Sep 17 16:50:33 nativespace-cdp sshd[3146241]: Invalid user admin from 57.128.172.114 port 51316
Sep 17 16:50:33 nativespace-cdp sshd[3146241]: input_userauth_request: invalid user admin [preauth]
Sep 17 16:50:33 nativespace-cdp sshd[3146241]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:50:33 nativespace-cdp sshd[3146241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.128.172.114
Sep 17 16:50:35 nativespace-cdp sshd[3146241]: Failed password for invalid user admin from 57.128.172.114 port 51316 ssh2
Sep 17 16:50:35 nativespace-cdp sshd[3146241]: Received disconnect from 57.128.172.114 port 51316:11: Bye Bye [preauth]
Sep 17 16:50:35 nativespace-cdp sshd[3146241]: Disconnected from 57.128.172.114 port 51316 [preauth]
Sep 17 16:50:41 nativespace-cdp sshd[3146274]: Invalid user git01 from 206.189.141.87 port 51934
Sep 17 16:50:41 nativespace-cdp sshd[3146274]: input_userauth_request: invalid user git01 [preauth]
Sep 17 16:50:41 nativespace-cdp sshd[3146274]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:50:41 nativespace-cdp sshd[3146274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.141.87
Sep 17 16:50:43 nativespace-cdp sshd[3146274]: Failed password for invalid user git01 from 206.189.141.87 port 51934 ssh2
Sep 17 16:50:44 nativespace-cdp sshd[3146298]: Invalid user ubuntu from 142.44.241.112 port 43842
Sep 17 16:50:44 nativespace-cdp sshd[3146298]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 16:50:44 nativespace-cdp sshd[3146298]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:50:44 nativespace-cdp sshd[3146298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.241.112
Sep 17 16:50:44 nativespace-cdp sshd[3146274]: Received disconnect from 206.189.141.87 port 51934:11: Bye Bye [preauth]
Sep 17 16:50:44 nativespace-cdp sshd[3146274]: Disconnected from 206.189.141.87 port 51934 [preauth]
Sep 17 16:50:45 nativespace-cdp sshd[3146302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.178.206.226  user=root
Sep 17 16:50:45 nativespace-cdp sshd[3146302]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 17 16:50:47 nativespace-cdp sshd[3146302]: Failed password for root from 68.178.206.226 port 59946 ssh2
Sep 17 16:50:47 nativespace-cdp sshd[3146302]: Received disconnect from 68.178.206.226 port 59946:11: Bye Bye [preauth]
Sep 17 16:50:47 nativespace-cdp sshd[3146302]: Disconnected from 68.178.206.226 port 59946 [preauth]
Sep 17 16:50:47 nativespace-cdp sshd[3146298]: Failed password for invalid user ubuntu from 142.44.241.112 port 43842 ssh2
Sep 17 16:50:47 nativespace-cdp sshd[3146298]: Received disconnect from 142.44.241.112 port 43842:11: Bye Bye [preauth]
Sep 17 16:50:47 nativespace-cdp sshd[3146298]: Disconnected from 142.44.241.112 port 43842 [preauth]
Sep 17 16:51:02 nativespace-cdp sshd[3146407]: Invalid user docker from 197.157.17.151 port 41412
Sep 17 16:51:02 nativespace-cdp sshd[3146407]: input_userauth_request: invalid user docker [preauth]
Sep 17 16:51:02 nativespace-cdp sshd[3146407]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:02 nativespace-cdp sshd[3146407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.157.17.151
Sep 17 16:51:04 nativespace-cdp sshd[3146441]: Invalid user git01 from 86.139.87.32 port 44242
Sep 17 16:51:04 nativespace-cdp sshd[3146441]: input_userauth_request: invalid user git01 [preauth]
Sep 17 16:51:04 nativespace-cdp sshd[3146441]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:04 nativespace-cdp sshd[3146441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.139.87.32
Sep 17 16:51:04 nativespace-cdp sshd[3146407]: Failed password for invalid user docker from 197.157.17.151 port 41412 ssh2
Sep 17 16:51:04 nativespace-cdp sshd[3146407]: Received disconnect from 197.157.17.151 port 41412:11: Bye Bye [preauth]
Sep 17 16:51:04 nativespace-cdp sshd[3146407]: Disconnected from 197.157.17.151 port 41412 [preauth]
Sep 17 16:51:06 nativespace-cdp sshd[3146441]: Failed password for invalid user git01 from 86.139.87.32 port 44242 ssh2
Sep 17 16:51:06 nativespace-cdp sshd[3146441]: Received disconnect from 86.139.87.32 port 44242:11: Bye Bye [preauth]
Sep 17 16:51:06 nativespace-cdp sshd[3146441]: Disconnected from 86.139.87.32 port 44242 [preauth]
Sep 17 16:51:06 nativespace-cdp sshd[3146459]: Invalid user admin from 190.145.200.210 port 36592
Sep 17 16:51:06 nativespace-cdp sshd[3146459]: input_userauth_request: invalid user admin [preauth]
Sep 17 16:51:06 nativespace-cdp sshd[3146459]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:06 nativespace-cdp sshd[3146459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.200.210
Sep 17 16:51:09 nativespace-cdp sshd[3146459]: Failed password for invalid user admin from 190.145.200.210 port 36592 ssh2
Sep 17 16:51:09 nativespace-cdp sshd[3146459]: Received disconnect from 190.145.200.210 port 36592:11: Bye Bye [preauth]
Sep 17 16:51:09 nativespace-cdp sshd[3146459]: Disconnected from 190.145.200.210 port 36592 [preauth]
Sep 17 16:51:13 nativespace-cdp sshd[3146516]: Invalid user oracle from 57.128.172.114 port 48172
Sep 17 16:51:13 nativespace-cdp sshd[3146516]: input_userauth_request: invalid user oracle [preauth]
Sep 17 16:51:13 nativespace-cdp sshd[3146516]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:13 nativespace-cdp sshd[3146516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=57.128.172.114
Sep 17 16:51:15 nativespace-cdp sshd[3146516]: Failed password for invalid user oracle from 57.128.172.114 port 48172 ssh2
Sep 17 16:51:17 nativespace-cdp sshd[3146516]: Received disconnect from 57.128.172.114 port 48172:11: Bye Bye [preauth]
Sep 17 16:51:17 nativespace-cdp sshd[3146516]: Disconnected from 57.128.172.114 port 48172 [preauth]
Sep 17 16:51:18 nativespace-cdp sshd[3146524]: Invalid user user001 from 189.195.113.27 port 36650
Sep 17 16:51:18 nativespace-cdp sshd[3146524]: input_userauth_request: invalid user user001 [preauth]
Sep 17 16:51:18 nativespace-cdp sshd[3146524]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:18 nativespace-cdp sshd[3146524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.113.27
Sep 17 16:51:20 nativespace-cdp sshd[3146524]: Failed password for invalid user user001 from 189.195.113.27 port 36650 ssh2
Sep 17 16:51:21 nativespace-cdp sshd[3146524]: Received disconnect from 189.195.113.27 port 36650:11: Bye Bye [preauth]
Sep 17 16:51:21 nativespace-cdp sshd[3146524]: Disconnected from 189.195.113.27 port 36650 [preauth]
Sep 17 16:51:25 nativespace-cdp sshd[3146580]: Invalid user hadoop from 142.44.241.112 port 56486
Sep 17 16:51:25 nativespace-cdp sshd[3146580]: input_userauth_request: invalid user hadoop [preauth]
Sep 17 16:51:25 nativespace-cdp sshd[3146580]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:25 nativespace-cdp sshd[3146580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.241.112
Sep 17 16:51:26 nativespace-cdp sshd[3146585]: Invalid user dev from 68.178.206.226 port 52780
Sep 17 16:51:26 nativespace-cdp sshd[3146585]: input_userauth_request: invalid user dev [preauth]
Sep 17 16:51:26 nativespace-cdp sshd[3146585]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:26 nativespace-cdp sshd[3146585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.178.206.226
Sep 17 16:51:27 nativespace-cdp sshd[3146580]: Failed password for invalid user hadoop from 142.44.241.112 port 56486 ssh2
Sep 17 16:51:27 nativespace-cdp sshd[3146580]: Received disconnect from 142.44.241.112 port 56486:11: Bye Bye [preauth]
Sep 17 16:51:27 nativespace-cdp sshd[3146580]: Disconnected from 142.44.241.112 port 56486 [preauth]
Sep 17 16:51:28 nativespace-cdp sshd[3146585]: Failed password for invalid user dev from 68.178.206.226 port 52780 ssh2
Sep 17 16:51:32 nativespace-cdp sshd[3146702]: Invalid user oracle from 206.189.141.87 port 58542
Sep 17 16:51:32 nativespace-cdp sshd[3146702]: input_userauth_request: invalid user oracle [preauth]
Sep 17 16:51:32 nativespace-cdp sshd[3146702]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:32 nativespace-cdp sshd[3146702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.141.87
Sep 17 16:51:33 nativespace-cdp sshd[3146735]: Connection closed by 159.100.136.21 port 34112 [preauth]
Sep 17 16:51:34 nativespace-cdp sshd[3146702]: Failed password for invalid user oracle from 206.189.141.87 port 58542 ssh2
Sep 17 16:51:46 nativespace-cdp sshd[3146835]: Invalid user nexus from 86.139.87.32 port 50932
Sep 17 16:51:46 nativespace-cdp sshd[3146835]: input_userauth_request: invalid user nexus [preauth]
Sep 17 16:51:46 nativespace-cdp sshd[3146835]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:46 nativespace-cdp sshd[3146835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.139.87.32
Sep 17 16:51:47 nativespace-cdp sshd[3146835]: Failed password for invalid user nexus from 86.139.87.32 port 50932 ssh2
Sep 17 16:51:47 nativespace-cdp sshd[3146835]: Received disconnect from 86.139.87.32 port 50932:11: Bye Bye [preauth]
Sep 17 16:51:47 nativespace-cdp sshd[3146835]: Disconnected from 86.139.87.32 port 50932 [preauth]
Sep 17 16:51:57 nativespace-cdp sshd[3146955]: Invalid user admin from 189.195.113.27 port 49402
Sep 17 16:51:57 nativespace-cdp sshd[3146955]: input_userauth_request: invalid user admin [preauth]
Sep 17 16:51:57 nativespace-cdp sshd[3146955]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:57 nativespace-cdp sshd[3146955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.113.27
Sep 17 16:51:58 nativespace-cdp sshd[3146955]: Failed password for invalid user admin from 189.195.113.27 port 49402 ssh2
Sep 17 16:51:59 nativespace-cdp sshd[3147003]: Invalid user git from 197.157.17.151 port 43400
Sep 17 16:51:59 nativespace-cdp sshd[3147003]: input_userauth_request: invalid user git [preauth]
Sep 17 16:51:59 nativespace-cdp sshd[3147003]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:51:59 nativespace-cdp sshd[3147003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.157.17.151
Sep 17 16:52:01 nativespace-cdp sshd[3147003]: Failed password for invalid user git from 197.157.17.151 port 43400 ssh2
Sep 17 16:52:01 nativespace-cdp sshd[3147003]: Received disconnect from 197.157.17.151 port 43400:11: Bye Bye [preauth]
Sep 17 16:52:01 nativespace-cdp sshd[3147003]: Disconnected from 197.157.17.151 port 43400 [preauth]
Sep 17 16:54:13 nativespace-cdp sshd[3147903]: Invalid user user001 from 190.145.200.210 port 41054
Sep 17 16:54:13 nativespace-cdp sshd[3147903]: input_userauth_request: invalid user user001 [preauth]
Sep 17 16:54:13 nativespace-cdp sshd[3147903]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 16:54:13 nativespace-cdp sshd[3147903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.200.210
Sep 17 16:54:15 nativespace-cdp sshd[3147903]: Failed password for invalid user user001 from 190.145.200.210 port 41054 ssh2
Sep 17 16:54:15 nativespace-cdp sshd[3147903]: Received disconnect from 190.145.200.210 port 41054:11: Bye Bye [preauth]
Sep 17 16:54:15 nativespace-cdp sshd[3147903]: Disconnected from 190.145.200.210 port 41054 [preauth]
Sep 17 16:56:33 nativespace-cdp sshd[3148514]: Connection closed by 159.100.136.21 port 43446 [preauth]
Sep 17 17:01:34 nativespace-cdp sshd[3149737]: Connection closed by 159.100.136.21 port 52580 [preauth]
Sep 17 17:06:33 nativespace-cdp sshd[3151394]: Connection closed by 159.100.136.21 port 34392 [preauth]
Sep 17 17:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 17:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:23 nativespace-cdp sudo[3152030]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 17:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:23 nativespace-cdp sudo[3152035]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 17:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:24 nativespace-cdp sudo[3152040]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 17:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:25 nativespace-cdp sudo[3152057]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 17:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152063]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152138]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152143]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152147]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152152]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152157]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:44 nativespace-cdp sudo[3152165]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 17:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:46 nativespace-cdp sudo[3152176]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 17:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:46 nativespace-cdp sudo[3152182]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=martsblo user-2=ptkxhsbt user-3=dickemery123 user-4=hhdugcor user-5=lbhyisi user-6=magichat user-7=lakesan1 user-8=brmrjxl user-9=atestord user-10=sarafoundation user-11=strathar user-12=wilsonsw user-13=megacards user-14=musorguk user-15=jarvisin user-16=theblack user-17=hodgesonweb user-18=spectrum user-19=agproduc user-20=still user-21=leereyn1 user-22=stephani user-23=foundation user-24=booff user-25=markward user-26=lbscrmod user-27=maflemin user-28=vantagep user-29=connect9 user-30=athenare user-31=ulsukarm user-32=alexadmin user-33=skyfirec user-34=askhform user-35=stuartge user-36=innovat1 user-37=nativene user-38=nstriton user-39=brighto1 user-40=oneoarco user-41=battlere user-42=vivienn1 user-43=firstre2 user-44=bedfords user-45=bemadonn user-46=newstoda user-47=ggaaorgu user-48=belle
Sep 17 17:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=elecleis user-50=gilpin user-51=milloyco user-52=fetch user-53=carsinyo user-54=hubmaster user-55=ianrayne user-56=accooper user-57=thqkgnbz user-58=connectedshoppin user-59=firstres user-60=ultbcrra user-61=jonhartl user-62=seftvta user-63=opaiscyx user-64=coursemc user-65=costestimatorco user-66=firstrel user-67=clarkass user-68=highlegh user-69=southlon user-70=firstred user-71=reliable user-72=ninejimm user-73=cambria1 user-74=cathski user-75=cwsocial user-76=pugwash user-77=paulmca1 user-78=howardon user-79=hirefootballgame user-80=courseme user-81=eugincou user-82=foods user-83=leftie user-84=fortunaz user-85=health2045 user-86=nscdp user-87=steakbridieme user-88=firstre5 user-89=donnychicago user-90=philmcph user-91=ctedorgu user-92=lkpier user-93=isleofwi user-94=smrszyqg user-95=barbersh user-96=tigerlet user-97=nomistakes user-98=hidden user-99=fawcettd user-100=burydropin user-101=nsceres
Sep 17 17:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=darkstar user-103=eatspam user-104=beauty user-105=dhyana user-106=asandcoc user-107=sibtoncc user-108=zebrapho user-109=bwppodcast user-110=steve user-111=what user-112=tstardom user-113=oubpgvbx user-114=nvihkvu user-115=havantho user-116=cath user-117=sketchy user-118=kategilpin user-119=dancinggardener user-120=stagingerris user-121=ladburyp user-122=design user-123=nove user-124=boldover user-125=crrtipdl user-126=sosevalu user-127=bakery user-128=lucy user-129=attlebor user-130=onlycont user-131=branko user-132=ranxterc user-133=outdoorc user-134=hodgsonmail user-135=romaldki user-136=tomandle user-137=jennimil user-138=mcdermos user-139=chrisdal user-140=david user-141=nbhavers user-142=careers feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 17:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 17:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:47 nativespace-cdp sudo[3152190]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:48 nativespace-cdp sudo[3152197]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d1Fw1Hf4lOSeaMfz.~
Sep 17 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:48 nativespace-cdp sudo[3152202]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d1Fw1Hf4lOSeaMfz.~'
Sep 17 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:48 nativespace-cdp sudo[3152206]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-d1Fw1Hf4lOSeaMfz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:48 nativespace-cdp sudo[3152212]: pam_unix(sudo:session): session closed for user root
Sep 17 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 17:09:48 nativespace-cdp sudo[3152217]: pam_unix(sudo:session): session closed for user root
Sep 17 17:11:33 nativespace-cdp sshd[3152681]: Connection closed by 159.100.136.21 port 43920 [preauth]
Sep 17 17:16:33 nativespace-cdp sshd[3153753]: Connection closed by 159.100.136.21 port 53708 [preauth]
Sep 17 17:21:33 nativespace-cdp sshd[3155547]: Connection closed by 159.100.136.21 port 35082 [preauth]
Sep 17 17:26:33 nativespace-cdp sshd[3156683]: Connection closed by 159.100.136.21 port 45072 [preauth]
Sep 17 17:31:33 nativespace-cdp sshd[3157847]: Connection closed by 159.100.136.21 port 54268 [preauth]
Sep 17 17:36:33 nativespace-cdp sshd[3159094]: Connection closed by 159.100.136.21 port 35908 [preauth]
Sep 17 17:41:34 nativespace-cdp sshd[3160533]: Connection closed by 159.100.136.21 port 45262 [preauth]
Sep 17 17:46:33 nativespace-cdp sshd[3162143]: Connection closed by 159.100.136.21 port 54956 [preauth]
Sep 17 17:51:36 nativespace-cdp sshd[3163791]: Connection closed by 159.100.136.21 port 36090 [preauth]
Sep 17 17:56:34 nativespace-cdp sshd[3164826]: Connection closed by 159.100.136.21 port 46148 [preauth]
Sep 17 18:01:33 nativespace-cdp sshd[3166068]: Connection closed by 159.100.136.21 port 55800 [preauth]
Sep 17 18:06:33 nativespace-cdp sshd[3167294]: Connection closed by 159.100.136.21 port 36914 [preauth]
Sep 17 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:23 nativespace-cdp sudo[3167946]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:23 nativespace-cdp sudo[3167951]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:24 nativespace-cdp sudo[3167956]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 18:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:24 nativespace-cdp sudo[3167962]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 18:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3167969]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3168001]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3168009]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3168012]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3168021]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3168026]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:28 nativespace-cdp sudo[3168035]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 18:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:30 nativespace-cdp sudo[3168096]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 18:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:30 nativespace-cdp sudo[3168110]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=bwppodcast user-3=zebrapho user-4=asandcoc user-5=sibtoncc user-6=dhyana user-7=beauty user-8=darkstar user-9=eatspam user-10=nsceres user-11=fawcettd user-12=burydropin user-13=nomistakes user-14=hidden user-15=tigerlet user-16=barbersh user-17=isleofwi user-18=smrszyqg user-19=lkpier user-20=steakbridieme user-21=firstre5 user-22=donnychicago user-23=ctedorgu user-24=philmcph user-25=nscdp user-26=foods user-27=leftie user-28=fortunaz user-29=health2045 user-30=eugincou user-31=courseme user-32=hirefootballgame user-33=cwsocial user-34=howardon user-35=pugwash user-36=paulmca1 user-37=cathski user-38=cambria1 user-39=ninejimm user-40=reliable user-41=david user-42=careers user-43=nbhavers user-44=chrisdal user-45=mcdermos user-46=jennimil user-47=tomandle user-48=romaldki
Sep 17 18:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ranxterc user-50=outdoorc user-51=hodgsonmail user-52=branko user-53=onlycont user-54=lucy user-55=attlebor user-56=bakery user-57=crrtipdl user-58=sosevalu user-59=boldover user-60=nove user-61=design user-62=dancinggardener user-63=stagingerris user-64=ladburyp user-65=kategilpin user-66=havantho user-67=sketchy user-68=cath user-69=nvihkvu user-70=oubpgvbx user-71=tstardom user-72=what user-73=ulsukarm user-74=vantagep user-75=athenare user-76=connect9 user-77=lbscrmod user-78=maflemin user-79=foundation user-80=booff user-81=markward user-82=stephani user-83=leereyn1 user-84=agproduc user-85=still user-86=spectrum user-87=hodgesonweb user-88=theblack user-89=jarvisin user-90=megacards user-91=musorguk user-92=wilsonsw user-93=strathar user-94=atestord user-95=sarafoundation user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=hhdugcor user-100=lbhyisi user-101=dickemery123 user-102=ptkxhsbt
Sep 17 18:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=firstred user-105=highlegh user-106=southlon user-107=clarkass user-108=firstrel user-109=costestimatorco user-110=coursemc user-111=opaiscyx user-112=ultbcrra user-113=jonhartl user-114=seftvta user-115=firstres user-116=connectedshoppin user-117=thqkgnbz user-118=accooper user-119=ianrayne user-120=hubmaster user-121=fetch user-122=carsinyo user-123=gilpin user-124=milloyco user-125=elecleis user-126=newstoda user-127=ggaaorgu user-128=belle user-129=bemadonn user-130=bedfords user-131=vivienn1 user-132=firstre2 user-133=oneoarco user-134=battlere user-135=nstriton user-136=brighto1 user-137=nativene user-138=innovat1 user-139=askhform user-140=stuartge user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 18:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 18:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:31 nativespace-cdp sudo[3168133]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 18:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:32 nativespace-cdp sudo[3168168]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9hmTvUfJImWS9H51.~
Sep 17 18:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:32 nativespace-cdp sudo[3168173]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9hmTvUfJImWS9H51.~'
Sep 17 18:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:32 nativespace-cdp sudo[3168177]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9hmTvUfJImWS9H51.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 18:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:32 nativespace-cdp sudo[3168183]: pam_unix(sudo:session): session closed for user root
Sep 17 18:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 18:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 18:09:32 nativespace-cdp sudo[3168188]: pam_unix(sudo:session): session closed for user root
Sep 17 18:11:33 nativespace-cdp sshd[3168736]: Connection closed by 159.100.136.21 port 46286 [preauth]
Sep 17 18:16:33 nativespace-cdp sshd[3170057]: Connection closed by 159.100.136.21 port 55618 [preauth]
Sep 17 18:21:33 nativespace-cdp sshd[3171772]: Connection closed by 159.100.136.21 port 36524 [preauth]
Sep 17 18:26:36 nativespace-cdp sshd[3172847]: Connection closed by 159.100.136.21 port 46538 [preauth]
Sep 17 18:31:33 nativespace-cdp sshd[3174025]: Connection closed by 159.100.136.21 port 56014 [preauth]
Sep 17 18:36:33 nativespace-cdp sshd[3175221]: Connection closed by 159.100.136.21 port 37730 [preauth]
Sep 17 18:41:33 nativespace-cdp sshd[3176727]: Connection closed by 159.100.136.21 port 47144 [preauth]
Sep 17 18:46:36 nativespace-cdp sshd[3178020]: Connection closed by 159.100.136.21 port 56502 [preauth]
Sep 17 18:51:36 nativespace-cdp sshd[3179724]: Connection closed by 159.100.136.21 port 36590 [preauth]
Sep 17 18:56:37 nativespace-cdp sshd[3180800]: Connection closed by 159.100.136.21 port 46440 [preauth]
Sep 17 19:01:33 nativespace-cdp sshd[3181953]: Connection closed by 159.100.136.21 port 54366 [preauth]
Sep 17 19:06:33 nativespace-cdp sshd[3183153]: Connection closed by 159.100.136.21 port 36030 [preauth]
Sep 17 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:22 nativespace-cdp sudo[3184101]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:22 nativespace-cdp sudo[3184106]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:23 nativespace-cdp sudo[3184111]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 19:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:23 nativespace-cdp sudo[3184117]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 19:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:25 nativespace-cdp sudo[3184123]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 19:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:25 nativespace-cdp sudo[3184137]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 19:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:25 nativespace-cdp sudo[3184142]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 19:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:25 nativespace-cdp sudo[3184149]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 19:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:25 nativespace-cdp sudo[3184154]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:26 nativespace-cdp sudo[3184170]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:26 nativespace-cdp sudo[3184179]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:30 nativespace-cdp sudo[3184241]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:30 nativespace-cdp sudo[3184247]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sarafoundation user-2=atestord user-3=strathar user-4=lakesan1 user-5=brmrjxl user-6=musorguk user-7=megacards user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=maflemin user-16=lbscrmod user-17=connect9 user-18=athenare user-19=vantagep user-20=booff user-21=foundation user-22=markward user-23=ulsukarm user-24=theblack user-25=hodgesonweb user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=still user-31=agproduc user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=brighto1 user-37=nstriton user-38=bemadonn user-39=belle user-40=ggaaorgu user-41=newstoda user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=stuartge user-47=askhform user-48=innovat1
Sep 17 19:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=coursemc user-50=opaiscyx user-51=firstres user-52=seftvta user-53=jonhartl user-54=ultbcrra user-55=southlon user-56=highlegh user-57=firstred user-58=costestimatorco user-59=clarkass user-60=firstrel user-61=carsinyo user-62=fetch user-63=hubmaster user-64=elecleis user-65=milloyco user-66=gilpin user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=philmcph user-72=ctedorgu user-73=firstre5 user-74=steakbridieme user-75=donnychicago user-76=lkpier user-77=fortunaz user-78=health2045 user-79=leftie user-80=foods user-81=nscdp user-82=tigerlet user-83=barbersh user-84=hidden user-85=nomistakes user-86=smrszyqg user-87=isleofwi user-88=pugwash user-89=paulmca1 user-90=howardon user-91=cwsocial user-92=ninejimm user-93=reliable user-94=cathski user-95=cambria1 user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 17 19:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=eatspam user-109=darkstar user-110=beauty user-111=boldover user-112=nove user-113=sosevalu user-114=crrtipdl user-115=bakery user-116=nvihkvu user-117=sketchy user-118=cath user-119=havantho user-120=what user-121=tstardom user-122=oubpgvbx user-123=design user-124=kategilpin user-125=ladburyp user-126=dancinggardener user-127=stagingerris user-128=jennimil user-129=tomandle user-130=careers user-131=nbhavers user-132=david user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=branko user-140=ranxterc user-141=outdoorc user-142=hodgsonmail feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 19:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:31 nativespace-cdp sudo[3184255]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 19:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:32 nativespace-cdp sudo[3184265]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-a1IRMUhjbMt8bBRQ.~
Sep 17 19:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:32 nativespace-cdp sudo[3184270]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-a1IRMUhjbMt8bBRQ.~'
Sep 17 19:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:32 nativespace-cdp sudo[3184274]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-a1IRMUhjbMt8bBRQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 19:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:32 nativespace-cdp sudo[3184280]: pam_unix(sudo:session): session closed for user root
Sep 17 19:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 19:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 19:09:32 nativespace-cdp sudo[3184286]: pam_unix(sudo:session): session closed for user root
Sep 17 19:11:33 nativespace-cdp sshd[3184771]: Connection closed by 159.100.136.21 port 45442 [preauth]
Sep 17 19:16:34 nativespace-cdp sshd[3185963]: Connection closed by 159.100.136.21 port 54760 [preauth]
Sep 17 19:21:36 nativespace-cdp sshd[3187567]: Connection closed by 159.100.136.21 port 35892 [preauth]
Sep 17 19:26:33 nativespace-cdp sshd[3188726]: Connection closed by 159.100.136.21 port 45216 [preauth]
Sep 17 19:31:33 nativespace-cdp sshd[3189909]: Connection closed by 159.100.136.21 port 54550 [preauth]
Sep 17 19:36:33 nativespace-cdp sshd[3191160]: Connection closed by 159.100.136.21 port 36016 [preauth]
Sep 17 19:41:33 nativespace-cdp sshd[3192721]: Connection closed by 159.100.136.21 port 42646 [preauth]
Sep 17 19:46:33 nativespace-cdp sshd[3193817]: Connection closed by 159.100.136.21 port 51450 [preauth]
Sep 17 19:51:33 nativespace-cdp sshd[3195340]: Connection closed by 159.100.136.21 port 32782 [preauth]
Sep 17 19:56:33 nativespace-cdp sshd[3196461]: Connection closed by 159.100.136.21 port 41428 [preauth]
Sep 17 20:01:33 nativespace-cdp sshd[3197751]: Connection closed by 159.100.136.21 port 50376 [preauth]
Sep 17 20:06:33 nativespace-cdp sshd[3199628]: Connection closed by 159.100.136.21 port 59634 [preauth]
Sep 17 20:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 20:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:27 nativespace-cdp sudo[3200391]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:28 nativespace-cdp sudo[3200396]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:28 nativespace-cdp sudo[3200401]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:28 nativespace-cdp sudo[3200408]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 20:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:31 nativespace-cdp sudo[3200414]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:31 nativespace-cdp sudo[3200443]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:31 nativespace-cdp sudo[3200448]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 20:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:31 nativespace-cdp sudo[3200452]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:32 nativespace-cdp sudo[3200458]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:32 nativespace-cdp sudo[3200465]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:32 nativespace-cdp sudo[3200470]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 20:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:34 nativespace-cdp sudo[3200485]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 20:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:34 nativespace-cdp sudo[3200491]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=zebrapho user-3=bwppodcast user-4=asandcoc user-5=sibtoncc user-6=dhyana user-7=darkstar user-8=eatspam user-9=beauty user-10=nsceres user-11=fawcettd user-12=burydropin user-13=tigerlet user-14=barbersh user-15=nomistakes user-16=hidden user-17=smrszyqg user-18=isleofwi user-19=donnychicago user-20=steakbridieme user-21=firstre5 user-22=ctedorgu user-23=philmcph user-24=lkpier user-25=foods user-26=leftie user-27=fortunaz user-28=health2045 user-29=nscdp user-30=courseme user-31=eugincou user-32=hirefootballgame user-33=cwsocial user-34=paulmca1 user-35=howardon user-36=pugwash user-37=ninejimm user-38=reliable user-39=cathski user-40=cambria1 user-41=david user-42=nbhavers user-43=careers user-44=mcdermos user-45=chrisdal user-46=jennimil user-47=tomandle user-48=romaldki
Sep 17 20:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=branko user-50=outdoorc user-51=ranxterc user-52=hodgsonmail user-53=onlycont user-54=lucy user-55=attlebor user-56=crrtipdl user-57=sosevalu user-58=bakery user-59=boldover user-60=nove user-61=design user-62=kategilpin user-63=stagingerris user-64=dancinggardener user-65=ladburyp user-66=nvihkvu user-67=havantho user-68=cath user-69=sketchy user-70=what user-71=oubpgvbx user-72=tstardom user-73=ulsukarm user-74=lbscrmod user-75=maflemin user-76=vantagep user-77=athenare user-78=connect9 user-79=booff user-80=foundation user-81=markward user-82=leereyn1 user-83=stephani user-84=agproduc user-85=still user-86=theblack user-87=hodgesonweb user-88=spectrum user-89=jarvisin user-90=megacards user-91=musorguk user-92=wilsonsw user-93=atestord user-94=sarafoundation user-95=strathar user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=hhdugcor user-100=lbhyisi user-101=ptkxhsbt user-102=dickemery123
Sep 17 20:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=highlegh user-105=southlon user-106=firstred user-107=costestimatorco user-108=firstrel user-109=clarkass user-110=coursemc user-111=opaiscyx user-112=firstres user-113=ultbcrra user-114=seftvta user-115=jonhartl user-116=thqkgnbz user-117=connectedshoppin user-118=ianrayne user-119=accooper user-120=fetch user-121=carsinyo user-122=hubmaster user-123=elecleis user-124=gilpin user-125=milloyco user-126=bemadonn user-127=newstoda user-128=belle user-129=ggaaorgu user-130=bedfords user-131=oneoarco user-132=battlere user-133=vivienn1 user-134=firstre2 user-135=nstriton user-136=brighto1 user-137=nativene user-138=stuartge user-139=askhform user-140=innovat1 user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 20:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 20:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:35 nativespace-cdp sudo[3200499]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:36 nativespace-cdp sudo[3200510]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EnPag94RmnWihFlT.~
Sep 17 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:36 nativespace-cdp sudo[3200515]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EnPag94RmnWihFlT.~'
Sep 17 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:36 nativespace-cdp sudo[3200519]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EnPag94RmnWihFlT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:36 nativespace-cdp sudo[3200526]: pam_unix(sudo:session): session closed for user root
Sep 17 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:09:36 nativespace-cdp sudo[3200531]: pam_unix(sudo:session): session closed for user root
Sep 17 20:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c cpapi2 --user=paulmca1 Locale get_user_locale --output=json
Sep 17 20:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:10:56 nativespace-cdp sudo[3200924]: pam_unix(sudo:session): session closed for user root
Sep 17 20:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 20:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:10:56 nativespace-cdp sudo[3200931]: pam_unix(sudo:session): session closed for user root
Sep 17 20:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 20:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:10:56 nativespace-cdp sudo[3200937]: pam_unix(sudo:session): session closed for user root
Sep 17 20:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 20:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:10:57 nativespace-cdp sudo[3200943]: pam_unix(sudo:session): session closed for user root
Sep 17 20:10:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=agproduc user-2=still user-3=stephani user-4=leereyn1 user-5=jarvisin user-6=spectrum user-7=hodgesonweb user-8=theblack user-9=ulsukarm user-10=booff user-11=foundation user-12=markward user-13=vantagep user-14=athenare user-15=connect9 user-16=lbscrmod user-17=maflemin user-18=hhdugcor user-19=lbhyisi user-20=magichat user-21=martsblo user-22=dickemery123 user-23=ptkxhsbt user-24=wilsonsw user-25=megacards user-26=musorguk user-27=lakesan1 user-28=brmrjxl user-29=strathar user-30=atestord user-31=sarafoundation user-32=accooper user-33=ianrayne user-34=connectedshoppin user-35=thqkgnbz user-36=gilpin user-37=milloyco user-38=elecleis user-39=hubmaster user-40=fetch user-41=carsinyo user-42=clarkass user-43=firstrel user-44=costestimatorco user-45=firstred user-46=highlegh user-47=southlon
Sep 17 20:10:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ultbcrra user-49=seftvta user-50=jonhartl user-51=firstres user-52=opaiscyx user-53=coursemc user-54=innovat1 user-55=stuartge user-56=askhform user-57=nativene user-58=skyfirec user-59=alexadmin user-60=bedfords user-61=newstoda user-62=belle user-63=ggaaorgu user-64=bemadonn user-65=nstriton user-66=brighto1 user-67=vivienn1 user-68=firstre2 user-69=oneoarco user-70=battlere user-71=beauty user-72=darkstar user-73=eatspam user-74=dhyana user-75=fawcettd user-76=burydropin user-77=nsceres user-78=bwppodcast user-79=zebrapho user-80=steve user-81=sibtoncc user-82=asandcoc user-83=hirefootballgame user-84=eugincou user-85=courseme user-86=cathski user-87=cambria1 user-88=ninejimm user-89=reliable user-90=cwsocial user-91=paulmca1 user-92=pugwash user-93=howardon user-94=isleofwi user-95=smrszyqg user-96=nomistakes user-97=hidden user-98=barbersh user-99=tigerlet user-100=nscdp user-101=leftie
Sep 17 20:10:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=foods user-103=health2045 user-104=fortunaz user-105=lkpier user-106=firstre5 user-107=steakbridieme user-108=donnychicago user-109=philmcph user-110=ctedorgu user-111=outdoorc user-112=ranxterc user-113=hodgsonmail user-114=branko user-115=romaldki user-116=lucy user-117=attlebor user-118=onlycont user-119=chrisdal user-120=mcdermos user-121=david user-122=careers user-123=nbhavers user-124=tomandle user-125=jennimil user-126=stagingerris user-127=dancinggardener user-128=ladburyp user-129=kategilpin user-130=design user-131=tstardom user-132=oubpgvbx user-133=what user-134=havantho user-135=cath user-136=sketchy user-137=nvihkvu user-138=bakery user-139=crrtipdl user-140=sosevalu user-141=nove user-142=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 17 20:10:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 20:10:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:10:57 nativespace-cdp sudo[3200950]: pam_unix(sudo:session): session closed for user root
Sep 17 20:11:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 20:11:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:11:01 nativespace-cdp sudo[3200974]: pam_unix(sudo:session): session closed for user root
Sep 17 20:11:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/htdocs ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 20:11:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 20:11:02 nativespace-cdp sudo[3200990]: pam_unix(sudo:session): session closed for user root
Sep 17 20:11:33 nativespace-cdp sshd[3201087]: Connection closed by 159.100.136.21 port 39738 [preauth]
Sep 17 20:16:35 nativespace-cdp sshd[3202236]: Connection closed by 159.100.136.21 port 47420 [preauth]
Sep 17 20:21:35 nativespace-cdp sshd[3204132]: Connection closed by 159.100.136.21 port 56620 [preauth]
Sep 17 20:26:36 nativespace-cdp sshd[3205259]: Connection closed by 159.100.136.21 port 37930 [preauth]
Sep 17 20:31:34 nativespace-cdp sshd[3206463]: Connection closed by 159.100.136.21 port 47036 [preauth]
Sep 17 20:36:33 nativespace-cdp sshd[3208155]: Connection closed by 159.100.136.21 port 56824 [preauth]
Sep 17 20:41:33 nativespace-cdp sshd[3209546]: Connection closed by 159.100.136.21 port 37536 [preauth]
Sep 17 20:46:35 nativespace-cdp sshd[3210815]: Connection closed by 159.100.136.21 port 46930 [preauth]
Sep 17 20:51:35 nativespace-cdp sshd[3212112]: Connection closed by 159.100.136.21 port 54876 [preauth]
Sep 17 20:56:33 nativespace-cdp sshd[3213838]: Connection closed by 159.100.136.21 port 35162 [preauth]
Sep 17 21:01:36 nativespace-cdp sshd[3215179]: Connection closed by 159.100.136.21 port 44104 [preauth]
Sep 17 21:06:36 nativespace-cdp sshd[3216803]: Connection closed by 159.100.136.21 port 53846 [preauth]
Sep 17 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:21 nativespace-cdp sudo[3217316]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:21 nativespace-cdp sudo[3217320]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:22 nativespace-cdp sudo[3217325]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 21:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:22 nativespace-cdp sudo[3217332]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 21:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217338]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217359]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217364]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217368]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217372]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217378]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 21:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:24 nativespace-cdp sudo[3217384]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 21:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:26 nativespace-cdp sudo[3217399]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 21:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:26 nativespace-cdp sudo[3217405]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=zebrapho user-4=bwppodcast user-5=steve user-6=fawcettd user-7=burydropin user-8=nsceres user-9=darkstar user-10=eatspam user-11=beauty user-12=dhyana user-13=foods user-14=leftie user-15=fortunaz user-16=health2045 user-17=nscdp user-18=firstre5 user-19=steakbridieme user-20=donnychicago user-21=ctedorgu user-22=philmcph user-23=lkpier user-24=isleofwi user-25=smrszyqg user-26=tigerlet user-27=barbersh user-28=nomistakes user-29=hidden user-30=ninejimm user-31=reliable user-32=cambria1 user-33=cathski user-34=cwsocial user-35=pugwash user-36=howardon user-37=paulmca1 user-38=hirefootballgame user-39=courseme user-40=eugincou user-41=tomandle user-42=jennimil user-43=mcdermos user-44=chrisdal user-45=david user-46=careers user-47=nbhavers user-48=lucy
Sep 17 21:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=onlycont user-51=branko user-52=ranxterc user-53=outdoorc user-54=hodgsonmail user-55=romaldki user-56=nove user-57=boldover user-58=crrtipdl user-59=sosevalu user-60=bakery user-61=what user-62=tstardom user-63=oubpgvbx user-64=nvihkvu user-65=havantho user-66=cath user-67=sketchy user-68=kategilpin user-69=stagingerris user-70=dancinggardener user-71=ladburyp user-72=design user-73=booff user-74=foundation user-75=markward user-76=lbscrmod user-77=maflemin user-78=vantagep user-79=athenare user-80=connect9 user-81=ulsukarm user-82=jarvisin user-83=theblack user-84=hodgesonweb user-85=spectrum user-86=agproduc user-87=still user-88=leereyn1 user-89=stephani user-90=lakesan1 user-91=brmrjxl user-92=atestord user-93=sarafoundation user-94=strathar user-95=wilsonsw user-96=megacards user-97=musorguk user-98=martsblo user-99=ptkxhsbt user-100=dickemery123 user-101=hhdugcor user-102=lbhyisi
Sep 17 21:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=magichat user-104=firstres user-105=ultbcrra user-106=seftvta user-107=jonhartl user-108=opaiscyx user-109=coursemc user-110=costestimatorco user-111=firstrel user-112=clarkass user-113=highlegh user-114=southlon user-115=firstred user-116=elecleis user-117=gilpin user-118=milloyco user-119=fetch user-120=carsinyo user-121=hubmaster user-122=ianrayne user-123=accooper user-124=thqkgnbz user-125=connectedshoppin user-126=nstriton user-127=brighto1 user-128=oneoarco user-129=battlere user-130=vivienn1 user-131=firstre2 user-132=bedfords user-133=bemadonn user-134=newstoda user-135=belle user-136=ggaaorgu user-137=skyfirec user-138=alexadmin user-139=stuartge user-140=askhform user-141=innovat1 user-142=nativene feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 21:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 21:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:26 nativespace-cdp sudo[3217413]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 21:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:27 nativespace-cdp sudo[3217420]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PJOkATe6axdunsD1.~
Sep 17 21:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:27 nativespace-cdp sudo[3217426]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PJOkATe6axdunsD1.~'
Sep 17 21:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:27 nativespace-cdp sudo[3217430]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PJOkATe6axdunsD1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 21:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:27 nativespace-cdp sudo[3217436]: pam_unix(sudo:session): session closed for user root
Sep 17 21:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 21:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 21:09:27 nativespace-cdp sudo[3217441]: pam_unix(sudo:session): session closed for user root
Sep 17 21:11:33 nativespace-cdp sshd[3218120]: Connection closed by 159.100.136.21 port 34994 [preauth]
Sep 17 21:16:35 nativespace-cdp sshd[3219238]: Connection closed by 159.100.136.21 port 42190 [preauth]
Sep 17 21:21:37 nativespace-cdp sshd[3220767]: Connection closed by 159.100.136.21 port 50336 [preauth]
Sep 17 21:26:33 nativespace-cdp sshd[3221960]: Connection closed by 159.100.136.21 port 58146 [preauth]
Sep 17 21:31:33 nativespace-cdp sshd[3223180]: Connection closed by 159.100.136.21 port 39402 [preauth]
Sep 17 21:36:36 nativespace-cdp sshd[3224543]: Connection closed by 159.100.136.21 port 48820 [preauth]
Sep 17 21:41:35 nativespace-cdp sshd[3225944]: Connection closed by 159.100.136.21 port 57838 [preauth]
Sep 17 21:42:16 nativespace-cdp sshd[3226080]: Connection closed by 104.248.203.191 port 45387 [preauth]
Sep 17 21:42:16 nativespace-cdp sshd[3226069]: Did not receive identification string from 104.248.203.191 port 44615
Sep 17 21:46:35 nativespace-cdp sshd[3227041]: Connection closed by 159.100.136.21 port 39120 [preauth]
Sep 17 21:51:33 nativespace-cdp sshd[3228650]: Connection closed by 159.100.136.21 port 47316 [preauth]
Sep 17 21:56:33 nativespace-cdp sshd[3229638]: Connection closed by 159.100.136.21 port 56252 [preauth]
Sep 17 21:59:50 nativespace-cdp sshd[3230326]: Invalid user ubuntu from 188.226.182.5 port 47788
Sep 17 21:59:50 nativespace-cdp sshd[3230326]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 21:59:51 nativespace-cdp sshd[3230326]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 21:59:51 nativespace-cdp sshd[3230326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.182.5
Sep 17 21:59:53 nativespace-cdp sshd[3230326]: Failed password for invalid user ubuntu from 188.226.182.5 port 47788 ssh2
Sep 17 21:59:53 nativespace-cdp sshd[3230326]: Received disconnect from 188.226.182.5 port 47788:11: Bye Bye [preauth]
Sep 17 21:59:53 nativespace-cdp sshd[3230326]: Disconnected from 188.226.182.5 port 47788 [preauth]
Sep 17 22:01:31 nativespace-cdp sshd[3230948]: Invalid user user from 186.96.166.237 port 54882
Sep 17 22:01:31 nativespace-cdp sshd[3230948]: input_userauth_request: invalid user user [preauth]
Sep 17 22:01:31 nativespace-cdp sshd[3230948]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:01:31 nativespace-cdp sshd[3230948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.96.166.237
Sep 17 22:01:33 nativespace-cdp sshd[3230948]: Failed password for invalid user user from 186.96.166.237 port 54882 ssh2
Sep 17 22:01:35 nativespace-cdp sshd[3230948]: Received disconnect from 186.96.166.237 port 54882:11: Bye Bye [preauth]
Sep 17 22:01:35 nativespace-cdp sshd[3230948]: Disconnected from 186.96.166.237 port 54882 [preauth]
Sep 17 22:01:36 nativespace-cdp sshd[3230962]: Connection closed by 159.100.136.21 port 36140 [preauth]
Sep 17 22:03:20 nativespace-cdp sshd[3231417]: Invalid user postgres from 165.154.105.128 port 41970
Sep 17 22:03:20 nativespace-cdp sshd[3231417]: input_userauth_request: invalid user postgres [preauth]
Sep 17 22:03:20 nativespace-cdp sshd[3231417]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:03:20 nativespace-cdp sshd[3231417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.105.128
Sep 17 22:03:22 nativespace-cdp sshd[3231417]: Failed password for invalid user postgres from 165.154.105.128 port 41970 ssh2
Sep 17 22:03:26 nativespace-cdp sshd[3231417]: Received disconnect from 165.154.105.128 port 41970:11: Bye Bye [preauth]
Sep 17 22:03:26 nativespace-cdp sshd[3231417]: Disconnected from 165.154.105.128 port 41970 [preauth]
Sep 17 22:03:35 nativespace-cdp sshd[3231449]: Invalid user user from 157.245.251.23 port 39406
Sep 17 22:03:35 nativespace-cdp sshd[3231449]: input_userauth_request: invalid user user [preauth]
Sep 17 22:03:35 nativespace-cdp sshd[3231449]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:03:35 nativespace-cdp sshd[3231449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.251.23
Sep 17 22:03:36 nativespace-cdp sshd[3231449]: Failed password for invalid user user from 157.245.251.23 port 39406 ssh2
Sep 17 22:03:36 nativespace-cdp sshd[3231449]: Received disconnect from 157.245.251.23 port 39406:11: Bye Bye [preauth]
Sep 17 22:03:36 nativespace-cdp sshd[3231449]: Disconnected from 157.245.251.23 port 39406 [preauth]
Sep 17 22:04:00 nativespace-cdp sshd[3231515]: Invalid user git from 177.41.214.220 port 47552
Sep 17 22:04:00 nativespace-cdp sshd[3231515]: input_userauth_request: invalid user git [preauth]
Sep 17 22:04:00 nativespace-cdp sshd[3231515]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:04:00 nativespace-cdp sshd[3231515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.41.214.220
Sep 17 22:04:02 nativespace-cdp sshd[3231515]: Failed password for invalid user git from 177.41.214.220 port 47552 ssh2
Sep 17 22:04:02 nativespace-cdp sshd[3231515]: Received disconnect from 177.41.214.220 port 47552:11: Bye Bye [preauth]
Sep 17 22:04:02 nativespace-cdp sshd[3231515]: Disconnected from 177.41.214.220 port 47552 [preauth]
Sep 17 22:04:19 nativespace-cdp sshd[3231636]: Invalid user guest from 188.226.182.5 port 54746
Sep 17 22:04:19 nativespace-cdp sshd[3231636]: input_userauth_request: invalid user guest [preauth]
Sep 17 22:04:19 nativespace-cdp sshd[3231636]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:04:19 nativespace-cdp sshd[3231636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.182.5
Sep 17 22:04:21 nativespace-cdp sshd[3231636]: Failed password for invalid user guest from 188.226.182.5 port 54746 ssh2
Sep 17 22:04:24 nativespace-cdp sshd[3231636]: Received disconnect from 188.226.182.5 port 54746:11: Bye Bye [preauth]
Sep 17 22:04:24 nativespace-cdp sshd[3231636]: Disconnected from 188.226.182.5 port 54746 [preauth]
Sep 17 22:04:32 nativespace-cdp sshd[3231663]: Invalid user ali from 186.96.166.237 port 33484
Sep 17 22:04:32 nativespace-cdp sshd[3231663]: input_userauth_request: invalid user ali [preauth]
Sep 17 22:04:32 nativespace-cdp sshd[3231663]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:04:32 nativespace-cdp sshd[3231663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.96.166.237
Sep 17 22:04:34 nativespace-cdp sshd[3231663]: Failed password for invalid user ali from 186.96.166.237 port 33484 ssh2
Sep 17 22:04:36 nativespace-cdp sshd[3231663]: Received disconnect from 186.96.166.237 port 33484:11: Bye Bye [preauth]
Sep 17 22:04:36 nativespace-cdp sshd[3231663]: Disconnected from 186.96.166.237 port 33484 [preauth]
Sep 17 22:04:48 nativespace-cdp sshd[3231706]: Invalid user ftpuser from 157.245.251.23 port 38136
Sep 17 22:04:48 nativespace-cdp sshd[3231706]: input_userauth_request: invalid user ftpuser [preauth]
Sep 17 22:04:48 nativespace-cdp sshd[3231706]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:04:48 nativespace-cdp sshd[3231706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.251.23
Sep 17 22:04:50 nativespace-cdp sshd[3231706]: Failed password for invalid user ftpuser from 157.245.251.23 port 38136 ssh2
Sep 17 22:04:50 nativespace-cdp sshd[3231706]: Received disconnect from 157.245.251.23 port 38136:11: Bye Bye [preauth]
Sep 17 22:04:50 nativespace-cdp sshd[3231706]: Disconnected from 157.245.251.23 port 38136 [preauth]
Sep 17 22:04:54 nativespace-cdp sshd[3231724]: Invalid user zhangsan from 188.226.182.5 port 44788
Sep 17 22:04:54 nativespace-cdp sshd[3231724]: input_userauth_request: invalid user zhangsan [preauth]
Sep 17 22:04:54 nativespace-cdp sshd[3231724]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:04:54 nativespace-cdp sshd[3231724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.182.5
Sep 17 22:04:56 nativespace-cdp sshd[3231724]: Failed password for invalid user zhangsan from 188.226.182.5 port 44788 ssh2
Sep 17 22:04:56 nativespace-cdp sshd[3231724]: Received disconnect from 188.226.182.5 port 44788:11: Bye Bye [preauth]
Sep 17 22:04:56 nativespace-cdp sshd[3231724]: Disconnected from 188.226.182.5 port 44788 [preauth]
Sep 17 22:05:07 nativespace-cdp sshd[3232035]: Invalid user user from 177.41.214.220 port 36436
Sep 17 22:05:07 nativespace-cdp sshd[3232035]: input_userauth_request: invalid user user [preauth]
Sep 17 22:05:07 nativespace-cdp sshd[3232035]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:05:07 nativespace-cdp sshd[3232035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.41.214.220
Sep 17 22:05:09 nativespace-cdp sshd[3232035]: Failed password for invalid user user from 177.41.214.220 port 36436 ssh2
Sep 17 22:05:14 nativespace-cdp sshd[3232120]: Invalid user ali from 186.96.166.237 port 48260
Sep 17 22:05:14 nativespace-cdp sshd[3232120]: input_userauth_request: invalid user ali [preauth]
Sep 17 22:05:14 nativespace-cdp sshd[3232120]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:05:14 nativespace-cdp sshd[3232120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.96.166.237
Sep 17 22:05:16 nativespace-cdp sshd[3232120]: Failed password for invalid user ali from 186.96.166.237 port 48260 ssh2
Sep 17 22:05:16 nativespace-cdp sshd[3232120]: Received disconnect from 186.96.166.237 port 48260:11: Bye Bye [preauth]
Sep 17 22:05:16 nativespace-cdp sshd[3232120]: Disconnected from 186.96.166.237 port 48260 [preauth]
Sep 17 22:05:16 nativespace-cdp sshd[3232035]: Received disconnect from 177.41.214.220 port 36436:11: Bye Bye [preauth]
Sep 17 22:05:16 nativespace-cdp sshd[3232035]: Disconnected from 177.41.214.220 port 36436 [preauth]
Sep 17 22:05:21 nativespace-cdp sshd[3232209]: Invalid user frappe from 157.245.251.23 port 44142
Sep 17 22:05:21 nativespace-cdp sshd[3232209]: input_userauth_request: invalid user frappe [preauth]
Sep 17 22:05:21 nativespace-cdp sshd[3232209]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:05:21 nativespace-cdp sshd[3232209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.251.23
Sep 17 22:05:23 nativespace-cdp sshd[3232209]: Failed password for invalid user frappe from 157.245.251.23 port 44142 ssh2
Sep 17 22:05:24 nativespace-cdp sshd[3232209]: Received disconnect from 157.245.251.23 port 44142:11: Bye Bye [preauth]
Sep 17 22:05:24 nativespace-cdp sshd[3232209]: Disconnected from 157.245.251.23 port 44142 [preauth]
Sep 17 22:05:25 nativespace-cdp sshd[3232212]: Connection closed by 165.154.105.128 port 36440 [preauth]
Sep 17 22:06:04 nativespace-cdp sshd[3232694]: Invalid user sammy from 177.41.214.220 port 51918
Sep 17 22:06:04 nativespace-cdp sshd[3232694]: input_userauth_request: invalid user sammy [preauth]
Sep 17 22:06:04 nativespace-cdp sshd[3232694]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:06:04 nativespace-cdp sshd[3232694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.41.214.220
Sep 17 22:06:06 nativespace-cdp sshd[3232694]: Failed password for invalid user sammy from 177.41.214.220 port 51918 ssh2
Sep 17 22:06:06 nativespace-cdp sshd[3232694]: Received disconnect from 177.41.214.220 port 51918:11: Bye Bye [preauth]
Sep 17 22:06:06 nativespace-cdp sshd[3232694]: Disconnected from 177.41.214.220 port 51918 [preauth]
Sep 17 22:06:33 nativespace-cdp sshd[3232809]: Connection closed by 159.100.136.21 port 45570 [preauth]
Sep 17 22:06:44 nativespace-cdp sshd[3232814]: Connection closed by 165.154.105.128 port 51044 [preauth]
Sep 17 22:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 22:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:25 nativespace-cdp sudo[3233266]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 22:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:25 nativespace-cdp sudo[3233270]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 22:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:26 nativespace-cdp sudo[3233275]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 22:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:26 nativespace-cdp sudo[3233283]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 22:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233289]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233309]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233314]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233318]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233323]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233329]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:30 nativespace-cdp sudo[3233334]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 22:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:32 nativespace-cdp sudo[3233347]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:33 nativespace-cdp sudo[3233353]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bwppodcast user-2=zebrapho user-3=steve user-4=asandcoc user-5=sibtoncc user-6=beauty user-7=darkstar user-8=eatspam user-9=dhyana user-10=fawcettd user-11=burydropin user-12=nsceres user-13=isleofwi user-14=smrszyqg user-15=nomistakes user-16=hidden user-17=barbersh user-18=tigerlet user-19=nscdp user-20=foods user-21=leftie user-22=health2045 user-23=fortunaz user-24=lkpier user-25=steakbridieme user-26=firstre5 user-27=donnychicago user-28=ctedorgu user-29=philmcph user-30=hirefootballgame user-31=eugincou user-32=courseme user-33=cambria1 user-34=cathski user-35=reliable user-36=ninejimm user-37=cwsocial user-38=paulmca1 user-39=pugwash user-40=howardon user-41=chrisdal user-42=mcdermos user-43=david user-44=careers user-45=nbhavers user-46=tomandle user-47=jennimil user-48=outdoorc
Sep 17 22:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ranxterc user-50=hodgsonmail user-51=branko user-52=romaldki user-53=lucy user-54=attlebor user-55=onlycont user-56=bakery user-57=crrtipdl user-58=sosevalu user-59=nove user-60=boldover user-61=dancinggardener user-62=stagingerris user-63=ladburyp user-64=kategilpin user-65=design user-66=tstardom user-67=oubpgvbx user-68=what user-69=havantho user-70=cath user-71=sketchy user-72=nvihkvu user-73=ulsukarm user-74=booff user-75=foundation user-76=markward user-77=vantagep user-78=athenare user-79=connect9 user-80=lbscrmod user-81=maflemin user-82=agproduc user-83=still user-84=stephani user-85=leereyn1 user-86=jarvisin user-87=spectrum user-88=theblack user-89=hodgesonweb user-90=wilsonsw user-91=megacards user-92=musorguk user-93=brmrjxl user-94=lakesan1 user-95=strathar user-96=atestord user-97=sarafoundation user-98=hhdugcor user-99=lbhyisi user-100=magichat user-101=martsblo user-102=dickemery123
Sep 17 22:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ptkxhsbt user-104=clarkass user-105=firstrel user-106=costestimatorco user-107=firstred user-108=highlegh user-109=southlon user-110=ultbcrra user-111=jonhartl user-112=seftvta user-113=firstres user-114=opaiscyx user-115=coursemc user-116=accooper user-117=ianrayne user-118=connectedshoppin user-119=thqkgnbz user-120=gilpin user-121=milloyco user-122=elecleis user-123=hubmaster user-124=fetch user-125=carsinyo user-126=bedfords user-127=newstoda user-128=belle user-129=ggaaorgu user-130=bemadonn user-131=nstriton user-132=brighto1 user-133=vivienn1 user-134=firstre2 user-135=oneoarco user-136=battlere user-137=innovat1 user-138=askhform user-139=stuartge user-140=nativene user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 22:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:34 nativespace-cdp sudo[3233363]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:34 nativespace-cdp sudo[3233370]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ekbqk6VsYSIU5b4O.~
Sep 17 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:35 nativespace-cdp sudo[3233375]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ekbqk6VsYSIU5b4O.~'
Sep 17 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:35 nativespace-cdp sudo[3233379]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ekbqk6VsYSIU5b4O.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:35 nativespace-cdp sudo[3233385]: pam_unix(sudo:session): session closed for user root
Sep 17 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 22:09:35 nativespace-cdp sudo[3233390]: pam_unix(sudo:session): session closed for user root
Sep 17 22:11:25 nativespace-cdp sshd[3233912]: Invalid user user from 165.154.105.128 port 53004
Sep 17 22:11:25 nativespace-cdp sshd[3233912]: input_userauth_request: invalid user user [preauth]
Sep 17 22:11:25 nativespace-cdp sshd[3233912]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:11:25 nativespace-cdp sshd[3233912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.105.128
Sep 17 22:11:27 nativespace-cdp sshd[3233912]: Failed password for invalid user user from 165.154.105.128 port 53004 ssh2
Sep 17 22:11:31 nativespace-cdp sshd[3233912]: Received disconnect from 165.154.105.128 port 53004:11: Bye Bye [preauth]
Sep 17 22:11:31 nativespace-cdp sshd[3233912]: Disconnected from 165.154.105.128 port 53004 [preauth]
Sep 17 22:11:33 nativespace-cdp sshd[3233939]: Connection closed by 159.100.136.21 port 54576 [preauth]
Sep 17 22:12:33 nativespace-cdp sshd[3234097]: Invalid user deploy from 165.154.105.128 port 39380
Sep 17 22:12:33 nativespace-cdp sshd[3234097]: input_userauth_request: invalid user deploy [preauth]
Sep 17 22:12:33 nativespace-cdp sshd[3234097]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:12:33 nativespace-cdp sshd[3234097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.105.128
Sep 17 22:12:36 nativespace-cdp sshd[3234097]: Failed password for invalid user deploy from 165.154.105.128 port 39380 ssh2
Sep 17 22:12:36 nativespace-cdp sshd[3234097]: Received disconnect from 165.154.105.128 port 39380:11: Bye Bye [preauth]
Sep 17 22:12:36 nativespace-cdp sshd[3234097]: Disconnected from 165.154.105.128 port 39380 [preauth]
Sep 17 22:16:35 nativespace-cdp sshd[3235128]: Connection closed by 159.100.136.21 port 35562 [preauth]
Sep 17 22:26:34 nativespace-cdp sshd[3237865]: Connection closed by 159.100.136.21 port 53370 [preauth]
Sep 17 22:31:33 nativespace-cdp sshd[3239052]: Connection closed by 159.100.136.21 port 34044 [preauth]
Sep 17 22:36:33 nativespace-cdp sshd[3240583]: Connection closed by 159.100.136.21 port 43584 [preauth]
Sep 17 22:38:14 nativespace-cdp sshd[3240877]: Invalid user user from 1.215.240.130 port 64683
Sep 17 22:38:14 nativespace-cdp sshd[3240877]: input_userauth_request: invalid user user [preauth]
Sep 17 22:38:14 nativespace-cdp sshd[3240877]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:38:14 nativespace-cdp sshd[3240877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.215.240.130
Sep 17 22:38:16 nativespace-cdp sshd[3240877]: Failed password for invalid user user from 1.215.240.130 port 64683 ssh2
Sep 17 22:38:16 nativespace-cdp sshd[3240877]: Received disconnect from 1.215.240.130 port 64683:11: Bye Bye [preauth]
Sep 17 22:38:16 nativespace-cdp sshd[3240877]: Disconnected from 1.215.240.130 port 64683 [preauth]
Sep 17 22:40:31 nativespace-cdp sshd[3241530]: Bad protocol version identification '\003' from 194.169.175.43 port 64595
Sep 17 22:41:35 nativespace-cdp sshd[3241708]: Connection closed by 159.100.136.21 port 52928 [preauth]
Sep 17 22:42:19 nativespace-cdp sshd[3241833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.113  user=root
Sep 17 22:42:19 nativespace-cdp sshd[3241833]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 17 22:42:21 nativespace-cdp sshd[3241833]: Failed password for root from 68.183.193.113 port 42820 ssh2
Sep 17 22:42:21 nativespace-cdp sshd[3241833]: Received disconnect from 68.183.193.113 port 42820:11: Bye Bye [preauth]
Sep 17 22:42:21 nativespace-cdp sshd[3241833]: Disconnected from 68.183.193.113 port 42820 [preauth]
Sep 17 22:43:14 nativespace-cdp sshd[3241996]: Invalid user user from 68.183.193.113 port 57496
Sep 17 22:43:14 nativespace-cdp sshd[3241996]: input_userauth_request: invalid user user [preauth]
Sep 17 22:43:14 nativespace-cdp sshd[3241996]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:43:14 nativespace-cdp sshd[3241996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.113
Sep 17 22:43:15 nativespace-cdp sshd[3241999]: Invalid user deploy from 1.215.240.130 port 49019
Sep 17 22:43:15 nativespace-cdp sshd[3241999]: input_userauth_request: invalid user deploy [preauth]
Sep 17 22:43:15 nativespace-cdp sshd[3241999]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:43:15 nativespace-cdp sshd[3241999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.215.240.130
Sep 17 22:43:16 nativespace-cdp sshd[3241996]: Failed password for invalid user user from 68.183.193.113 port 57496 ssh2
Sep 17 22:43:16 nativespace-cdp sshd[3241996]: Received disconnect from 68.183.193.113 port 57496:11: Bye Bye [preauth]
Sep 17 22:43:16 nativespace-cdp sshd[3241996]: Disconnected from 68.183.193.113 port 57496 [preauth]
Sep 17 22:43:17 nativespace-cdp sshd[3241999]: Failed password for invalid user deploy from 1.215.240.130 port 49019 ssh2
Sep 17 22:43:17 nativespace-cdp sshd[3241999]: Received disconnect from 1.215.240.130 port 49019:11: Bye Bye [preauth]
Sep 17 22:43:17 nativespace-cdp sshd[3241999]: Disconnected from 1.215.240.130 port 49019 [preauth]
Sep 17 22:43:55 nativespace-cdp sshd[3242128]: Invalid user server from 68.183.193.113 port 44524
Sep 17 22:43:55 nativespace-cdp sshd[3242128]: input_userauth_request: invalid user server [preauth]
Sep 17 22:43:55 nativespace-cdp sshd[3242128]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:43:55 nativespace-cdp sshd[3242128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.193.113
Sep 17 22:43:57 nativespace-cdp sshd[3242128]: Failed password for invalid user server from 68.183.193.113 port 44524 ssh2
Sep 17 22:43:57 nativespace-cdp sshd[3242128]: Received disconnect from 68.183.193.113 port 44524:11: Bye Bye [preauth]
Sep 17 22:43:57 nativespace-cdp sshd[3242128]: Disconnected from 68.183.193.113 port 44524 [preauth]
Sep 17 22:44:09 nativespace-cdp sshd[3242209]: Invalid user postgres from 1.215.240.130 port 35562
Sep 17 22:44:09 nativespace-cdp sshd[3242209]: input_userauth_request: invalid user postgres [preauth]
Sep 17 22:44:09 nativespace-cdp sshd[3242209]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 22:44:09 nativespace-cdp sshd[3242209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.215.240.130
Sep 17 22:44:11 nativespace-cdp sshd[3242209]: Failed password for invalid user postgres from 1.215.240.130 port 35562 ssh2
Sep 17 22:44:13 nativespace-cdp sshd[3242209]: Received disconnect from 1.215.240.130 port 35562:11: Bye Bye [preauth]
Sep 17 22:44:13 nativespace-cdp sshd[3242209]: Disconnected from 1.215.240.130 port 35562 [preauth]
Sep 17 22:46:33 nativespace-cdp sshd[3242952]: Connection closed by 159.100.136.21 port 33990 [preauth]
Sep 17 22:51:33 nativespace-cdp sshd[3244599]: Connection closed by 159.100.136.21 port 43142 [preauth]
Sep 17 22:56:33 nativespace-cdp sshd[3245710]: Connection closed by 159.100.136.21 port 52494 [preauth]
Sep 17 23:01:33 nativespace-cdp sshd[3246969]: Connection closed by 159.100.136.21 port 33702 [preauth]
Sep 17 23:06:33 nativespace-cdp sshd[3248535]: Connection closed by 159.100.136.21 port 41954 [preauth]
Sep 17 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 17 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:22 nativespace-cdp sudo[3249044]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 17 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:22 nativespace-cdp sudo[3249048]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 17 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:23 nativespace-cdp sudo[3249053]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 17 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:23 nativespace-cdp sudo[3249067]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 17 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249073]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 17 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249146]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 17 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249151]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 17 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249155]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 17 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249160]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 17 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249167]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 17 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:44 nativespace-cdp sudo[3249172]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 17 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:53 nativespace-cdp sudo[3249197]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 17 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:53 nativespace-cdp sudo[3249203]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=bwppodcast user-3=zebrapho user-4=sibtoncc user-5=asandcoc user-6=dhyana user-7=beauty user-8=darkstar user-9=eatspam user-10=nsceres user-11=fawcettd user-12=burydropin user-13=nomistakes user-14=hidden user-15=barbersh user-16=tigerlet user-17=smrszyqg user-18=isleofwi user-19=lkpier user-20=donnychicago user-21=steakbridieme user-22=firstre5 user-23=ctedorgu user-24=philmcph user-25=nscdp user-26=foods user-27=leftie user-28=health2045 user-29=fortunaz user-30=eugincou user-31=courseme user-32=hirefootballgame user-33=cwsocial user-34=paulmca1 user-35=pugwash user-36=howardon user-37=cambria1 user-38=cathski user-39=ninejimm user-40=reliable user-41=david user-42=nbhavers user-43=careers user-44=chrisdal user-45=mcdermos user-46=jennimil user-47=tomandle user-48=romaldki
Sep 17 23:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ranxterc user-50=hodgsonmail user-51=outdoorc user-52=branko user-53=onlycont user-54=lucy user-55=attlebor user-56=bakery user-57=crrtipdl user-58=sosevalu user-59=boldover user-60=nove user-61=design user-62=dancinggardener user-63=stagingerris user-64=ladburyp user-65=kategilpin user-66=havantho user-67=cath user-68=sketchy user-69=nvihkvu user-70=tstardom user-71=oubpgvbx user-72=what user-73=ulsukarm user-74=vantagep user-75=connect9 user-76=athenare user-77=lbscrmod user-78=maflemin user-79=booff user-80=markward user-81=foundation user-82=stephani user-83=leereyn1 user-84=agproduc user-85=still user-86=spectrum user-87=hodgesonweb user-88=theblack user-89=jarvisin user-90=megacards user-91=musorguk user-92=wilsonsw user-93=strathar user-94=atestord user-95=sarafoundation user-96=brmrjxl user-97=lakesan1 user-98=magichat user-99=hhdugcor user-100=lbhyisi user-101=dickemery123 user-102=ptkxhsbt
Sep 17 23:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=firstred user-105=highlegh user-106=southlon user-107=firstrel user-108=clarkass user-109=costestimatorco user-110=coursemc user-111=opaiscyx user-112=ultbcrra user-113=seftvta user-114=jonhartl user-115=firstres user-116=connectedshoppin user-117=thqkgnbz user-118=accooper user-119=ianrayne user-120=hubmaster user-121=fetch user-122=carsinyo user-123=gilpin user-124=milloyco user-125=elecleis user-126=newstoda user-127=ggaaorgu user-128=belle user-129=bemadonn user-130=bedfords user-131=vivienn1 user-132=firstre2 user-133=oneoarco user-134=battlere user-135=nstriton user-136=brighto1 user-137=nativene user-138=innovat1 user-139=askhform user-140=stuartge user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 17 23:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 17 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:53 nativespace-cdp sudo[3249211]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:54 nativespace-cdp sudo[3249218]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Z6FzCkCbSGX7PYEx.~
Sep 17 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:54 nativespace-cdp sudo[3249223]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Z6FzCkCbSGX7PYEx.~'
Sep 17 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:54 nativespace-cdp sudo[3249227]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Z6FzCkCbSGX7PYEx.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 17 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:54 nativespace-cdp sudo[3249233]: pam_unix(sudo:session): session closed for user root
Sep 17 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 17 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 17 23:09:54 nativespace-cdp sudo[3249238]: pam_unix(sudo:session): session closed for user root
Sep 17 23:11:33 nativespace-cdp sshd[3249701]: Connection closed by 159.100.136.21 port 51280 [preauth]
Sep 17 23:16:33 nativespace-cdp sshd[3250818]: Connection closed by 159.100.136.21 port 60168 [preauth]
Sep 17 23:21:33 nativespace-cdp sshd[3252574]: Connection closed by 159.100.136.21 port 39934 [preauth]
Sep 17 23:26:33 nativespace-cdp sshd[3253616]: Connection closed by 159.100.136.21 port 47152 [preauth]
Sep 17 23:31:34 nativespace-cdp sshd[3254805]: Connection closed by 159.100.136.21 port 54626 [preauth]
Sep 17 23:36:33 nativespace-cdp sshd[3256126]: Connection closed by 159.100.136.21 port 36102 [preauth]
Sep 17 23:41:33 nativespace-cdp sshd[3257477]: Connection closed by 159.100.136.21 port 45228 [preauth]
Sep 17 23:43:11 nativespace-cdp sshd[3257732]: Invalid user ubuntu from 179.60.235.35 port 35293
Sep 17 23:43:11 nativespace-cdp sshd[3257732]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 23:43:11 nativespace-cdp sshd[3257732]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 23:43:11 nativespace-cdp sshd[3257732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.60.235.35
Sep 17 23:43:13 nativespace-cdp sshd[3257732]: Failed password for invalid user ubuntu from 179.60.235.35 port 35293 ssh2
Sep 17 23:43:13 nativespace-cdp sshd[3257732]: Received disconnect from 179.60.235.35 port 35293:11: Bye Bye [preauth]
Sep 17 23:43:13 nativespace-cdp sshd[3257732]: Disconnected from 179.60.235.35 port 35293 [preauth]
Sep 17 23:44:46 nativespace-cdp sshd[3257963]: Received disconnect from 104.248.52.17 port 41088:11: Bye Bye [preauth]
Sep 17 23:44:46 nativespace-cdp sshd[3257963]: Disconnected from 104.248.52.17 port 41088 [preauth]
Sep 17 23:45:41 nativespace-cdp sshd[3258348]: Invalid user ubuntu from 104.248.52.17 port 41170
Sep 17 23:45:41 nativespace-cdp sshd[3258348]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 23:45:41 nativespace-cdp sshd[3258348]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 23:45:41 nativespace-cdp sshd[3258348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.17
Sep 17 23:45:43 nativespace-cdp sshd[3258348]: Failed password for invalid user ubuntu from 104.248.52.17 port 41170 ssh2
Sep 17 23:45:43 nativespace-cdp sshd[3258348]: Received disconnect from 104.248.52.17 port 41170:11: Bye Bye [preauth]
Sep 17 23:45:43 nativespace-cdp sshd[3258348]: Disconnected from 104.248.52.17 port 41170 [preauth]
Sep 17 23:46:12 nativespace-cdp sshd[3258508]: Invalid user ubuntu from 179.60.235.35 port 50744
Sep 17 23:46:12 nativespace-cdp sshd[3258508]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 23:46:12 nativespace-cdp sshd[3258508]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 23:46:12 nativespace-cdp sshd[3258508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.60.235.35
Sep 17 23:46:14 nativespace-cdp sshd[3258508]: Failed password for invalid user ubuntu from 179.60.235.35 port 50744 ssh2
Sep 17 23:46:17 nativespace-cdp sshd[3258508]: Received disconnect from 179.60.235.35 port 50744:11: Bye Bye [preauth]
Sep 17 23:46:17 nativespace-cdp sshd[3258508]: Disconnected from 179.60.235.35 port 50744 [preauth]
Sep 17 23:46:21 nativespace-cdp sshd[3258535]: Invalid user app from 104.248.52.17 port 52006
Sep 17 23:46:21 nativespace-cdp sshd[3258535]: input_userauth_request: invalid user app [preauth]
Sep 17 23:46:21 nativespace-cdp sshd[3258535]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 23:46:21 nativespace-cdp sshd[3258535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.17
Sep 17 23:46:23 nativespace-cdp sshd[3258535]: Failed password for invalid user app from 104.248.52.17 port 52006 ssh2
Sep 17 23:46:23 nativespace-cdp sshd[3258535]: Received disconnect from 104.248.52.17 port 52006:11: Bye Bye [preauth]
Sep 17 23:46:23 nativespace-cdp sshd[3258535]: Disconnected from 104.248.52.17 port 52006 [preauth]
Sep 17 23:46:33 nativespace-cdp sshd[3258584]: Connection closed by 159.100.136.21 port 54282 [preauth]
Sep 17 23:46:58 nativespace-cdp sshd[3258655]: Invalid user develops from 104.248.52.17 port 60548
Sep 17 23:46:58 nativespace-cdp sshd[3258655]: input_userauth_request: invalid user develops [preauth]
Sep 17 23:46:58 nativespace-cdp sshd[3258655]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 23:46:58 nativespace-cdp sshd[3258655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.17
Sep 17 23:47:01 nativespace-cdp sshd[3258655]: Failed password for invalid user develops from 104.248.52.17 port 60548 ssh2
Sep 17 23:47:03 nativespace-cdp sshd[3258710]: Invalid user ubuntu from 179.60.235.35 port 56961
Sep 17 23:47:03 nativespace-cdp sshd[3258710]: input_userauth_request: invalid user ubuntu [preauth]
Sep 17 23:47:03 nativespace-cdp sshd[3258710]: pam_unix(sshd:auth): check pass; user unknown
Sep 17 23:47:03 nativespace-cdp sshd[3258710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.60.235.35
Sep 17 23:47:05 nativespace-cdp sshd[3258710]: Failed password for invalid user ubuntu from 179.60.235.35 port 56961 ssh2
Sep 17 23:51:33 nativespace-cdp sshd[3260229]: Connection closed by 159.100.136.21 port 35118 [preauth]
Sep 17 23:56:33 nativespace-cdp sshd[3261296]: Connection closed by 159.100.136.21 port 44606 [preauth]
Sep 18 00:01:37 nativespace-cdp sshd[3262904]: Connection closed by 159.100.136.21 port 53960 [preauth]
Sep 18 00:06:33 nativespace-cdp sshd[3264575]: Connection closed by 159.100.136.21 port 35674 [preauth]
Sep 18 00:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 00:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:24 nativespace-cdp sudo[3265099]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 00:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:24 nativespace-cdp sudo[3265104]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 00:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:25 nativespace-cdp sudo[3265109]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:25 nativespace-cdp sudo[3265117]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265124]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265136]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265141]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265145]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265150]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265156]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:29 nativespace-cdp sudo[3265161]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:31 nativespace-cdp sudo[3265174]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:32 nativespace-cdp sudo[3265180]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=steve user-4=zebrapho user-5=bwppodcast user-6=nsceres user-7=burydropin user-8=fawcettd user-9=dhyana user-10=eatspam user-11=darkstar user-12=beauty user-13=philmcph user-14=ctedorgu user-15=steakbridieme user-16=donnychicago user-17=firstre5 user-18=lkpier user-19=fortunaz user-20=health2045 user-21=foods user-22=leftie user-23=nscdp user-24=tigerlet user-25=barbersh user-26=hidden user-27=nomistakes user-28=smrszyqg user-29=isleofwi user-30=howardon user-31=paulmca1 user-32=pugwash user-33=cwsocial user-34=ninejimm user-35=reliable user-36=cathski user-37=cambria1 user-38=courseme user-39=eugincou user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=nbhavers user-44=careers user-45=david user-46=mcdermos user-47=chrisdal user-48=onlycont
Sep 18 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=lucy user-51=romaldki user-52=branko user-53=ranxterc user-54=hodgsonmail user-55=outdoorc user-56=boldover user-57=nove user-58=sosevalu user-59=crrtipdl user-60=bakery user-61=nvihkvu user-62=cath user-63=sketchy user-64=havantho user-65=what user-66=oubpgvbx user-67=tstardom user-68=design user-69=kategilpin user-70=ladburyp user-71=stagingerris user-72=dancinggardener user-73=maflemin user-74=lbscrmod user-75=athenare user-76=connect9 user-77=vantagep user-78=booff user-79=markward user-80=foundation user-81=ulsukarm user-82=hodgesonweb user-83=theblack user-84=spectrum user-85=jarvisin user-86=leereyn1 user-87=stephani user-88=still user-89=agproduc user-90=sarafoundation user-91=atestord user-92=strathar user-93=brmrjxl user-94=lakesan1 user-95=musorguk user-96=megacards user-97=wilsonsw user-98=ptkxhsbt user-99=dickemery123 user-100=martsblo user-101=magichat user-102=lbhyisi
Sep 18 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=hhdugcor user-104=coursemc user-105=opaiscyx user-106=firstres user-107=seftvta user-108=jonhartl user-109=ultbcrra user-110=southlon user-111=highlegh user-112=firstred user-113=costestimatorco user-114=firstrel user-115=clarkass user-116=carsinyo user-117=fetch user-118=hubmaster user-119=elecleis user-120=milloyco user-121=gilpin user-122=thqkgnbz user-123=connectedshoppin user-124=ianrayne user-125=accooper user-126=battlere user-127=oneoarco user-128=firstre2 user-129=vivienn1 user-130=brighto1 user-131=nstriton user-132=bemadonn user-133=belle user-134=ggaaorgu user-135=newstoda user-136=bedfords user-137=alexadmin user-138=skyfirec user-139=nativene user-140=askhform user-141=stuartge user-142=innovat1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:33 nativespace-cdp sudo[3265187]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:33 nativespace-cdp sudo[3265196]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-beu1CaAa6vTYZOQa.~
Sep 18 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:33 nativespace-cdp sudo[3265202]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-beu1CaAa6vTYZOQa.~'
Sep 18 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:33 nativespace-cdp sudo[3265206]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-beu1CaAa6vTYZOQa.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:33 nativespace-cdp sudo[3265212]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:34 nativespace-cdp sudo[3265217]: pam_unix(sudo:session): session closed for user root
Sep 18 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 18 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 00:09:39 nativespace-cdp sudo[3265223]: pam_unix(sudo:session): session closed for user root
Sep 18 00:11:33 nativespace-cdp sshd[3265821]: Connection closed by 159.100.136.21 port 45192 [preauth]
Sep 18 00:16:33 nativespace-cdp sshd[3266895]: Connection closed by 159.100.136.21 port 54642 [preauth]
Sep 18 00:21:34 nativespace-cdp sshd[3268457]: Connection closed by 159.100.136.21 port 35430 [preauth]
Sep 18 00:26:33 nativespace-cdp sshd[3269488]: Connection closed by 159.100.136.21 port 44940 [preauth]
Sep 18 00:31:35 nativespace-cdp sshd[3270610]: Connection closed by 159.100.136.21 port 54146 [preauth]
Sep 18 00:36:33 nativespace-cdp sshd[3271833]: Connection closed by 159.100.136.21 port 34868 [preauth]
Sep 18 00:41:35 nativespace-cdp sshd[3273027]: Connection closed by 159.100.136.21 port 43432 [preauth]
Sep 18 00:46:33 nativespace-cdp sshd[3274201]: Connection closed by 159.100.136.21 port 52698 [preauth]
Sep 18 00:51:33 nativespace-cdp sshd[3275687]: Connection closed by 159.100.136.21 port 33744 [preauth]
Sep 18 00:56:35 nativespace-cdp sshd[3277008]: Connection closed by 159.100.136.21 port 43186 [preauth]
Sep 18 01:01:36 nativespace-cdp sshd[3278160]: Connection closed by 159.100.136.21 port 51776 [preauth]
Sep 18 01:06:34 nativespace-cdp sshd[3280324]: Connection closed by 159.100.136.21 port 32970 [preauth]
Sep 18 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:19 nativespace-cdp sudo[3280742]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:19 nativespace-cdp sudo[3280746]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 01:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:20 nativespace-cdp sudo[3280749]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:20 nativespace-cdp sudo[3280753]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 01:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280757]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280766]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280769]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280773]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280776]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280779]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 01:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:21 nativespace-cdp sudo[3280783]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 01:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:23 nativespace-cdp sudo[3280792]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 01:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:23 nativespace-cdp sudo[3280796]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=fetch user-2=carsinyo user-3=hubmaster user-4=elecleis user-5=gilpin user-6=milloyco user-7=thqkgnbz user-8=connectedshoppin user-9=ianrayne user-10=accooper user-11=opaiscyx user-12=coursemc user-13=firstres user-14=ultbcrra user-15=seftvta user-16=jonhartl user-17=highlegh user-18=southlon user-19=firstred user-20=costestimatorco user-21=clarkass user-22=firstrel user-23=skyfirec user-24=alexadmin user-25=nativene user-26=stuartge user-27=askhform user-28=innovat1 user-29=oneoarco user-30=battlere user-31=vivienn1 user-32=firstre2 user-33=nstriton user-34=brighto1 user-35=bemadonn user-36=newstoda user-37=ggaaorgu user-38=belle user-39=bedfords user-40=theblack user-41=hodgesonweb user-42=spectrum user-43=jarvisin user-44=leereyn1 user-45=stephani user-46=agproduc user-47=still
Sep 18 01:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=lbscrmod user-49=maflemin user-50=vantagep user-51=athenare user-52=connect9 user-53=booff user-54=markward user-55=foundation user-56=ulsukarm user-57=ptkxhsbt user-58=dickemery123 user-59=martsblo user-60=magichat user-61=hhdugcor user-62=lbhyisi user-63=atestord user-64=sarafoundation user-65=strathar user-66=lakesan1 user-67=brmrjxl user-68=megacards user-69=musorguk user-70=wilsonsw user-71=onlycont user-72=lucy user-73=attlebor user-74=romaldki user-75=branko user-76=ranxterc user-77=hodgsonmail user-78=outdoorc user-79=jennimil user-80=tomandle user-81=david user-82=nbhavers user-83=careers user-84=mcdermos user-85=chrisdal user-86=nvihkvu user-87=havantho user-88=cath user-89=sketchy user-90=what user-91=tstardom user-92=oubpgvbx user-93=design user-94=kategilpin user-95=dancinggardener user-96=stagingerris user-97=ladburyp user-98=boldover user-99=nove user-100=crrtipdl user-101=sosevalu
Sep 18 01:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bakery user-103=nsceres user-104=fawcettd user-105=burydropin user-106=dhyana user-107=darkstar user-108=eatspam user-109=beauty user-110=asandcoc user-111=sibtoncc user-112=steve user-113=zebrapho user-114=bwppodcast user-115=cwsocial user-116=pugwash user-117=howardon user-118=paulmca1 user-119=ninejimm user-120=reliable user-121=cambria1 user-122=cathski user-123=courseme user-124=eugincou user-125=hirefootballgame user-126=steakbridieme user-127=firstre5 user-128=donnychicago user-129=ctedorgu user-130=philmcph user-131=lkpier user-132=leftie user-133=foods user-134=health2045 user-135=fortunaz user-136=nscdp user-137=barbersh user-138=tigerlet user-139=nomistakes user-140=hidden user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 01:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 01:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:24 nativespace-cdp sudo[3280800]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 01:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:24 nativespace-cdp sudo[3280806]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bG35dRJlrHi0LEWm.~
Sep 18 01:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:24 nativespace-cdp sudo[3280809]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bG35dRJlrHi0LEWm.~'
Sep 18 01:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:24 nativespace-cdp sudo[3280812]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bG35dRJlrHi0LEWm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 01:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:24 nativespace-cdp sudo[3280816]: pam_unix(sudo:session): session closed for user root
Sep 18 01:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 01:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 01:09:24 nativespace-cdp sudo[3280819]: pam_unix(sudo:session): session closed for user root
Sep 18 01:11:33 nativespace-cdp sshd[3281377]: Connection closed by 159.100.136.21 port 41812 [preauth]
Sep 18 01:16:33 nativespace-cdp sshd[3282374]: Connection closed by 159.100.136.21 port 50614 [preauth]
Sep 18 01:21:35 nativespace-cdp sshd[3283981]: Connection closed by 159.100.136.21 port 58776 [preauth]
Sep 18 01:31:33 nativespace-cdp sshd[3285987]: Connection closed by 159.100.136.21 port 49072 [preauth]
Sep 18 01:36:34 nativespace-cdp sshd[3287535]: Connection closed by 159.100.136.21 port 57912 [preauth]
Sep 18 01:40:58 nativespace-cdp sshd[3288345]: Invalid user student10 from 24.199.116.10 port 35062
Sep 18 01:40:58 nativespace-cdp sshd[3288345]: input_userauth_request: invalid user student10 [preauth]
Sep 18 01:40:58 nativespace-cdp sshd[3288345]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:40:58 nativespace-cdp sshd[3288345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.116.10
Sep 18 01:40:59 nativespace-cdp sshd[3288345]: Failed password for invalid user student10 from 24.199.116.10 port 35062 ssh2
Sep 18 01:40:59 nativespace-cdp sshd[3288345]: Received disconnect from 24.199.116.10 port 35062:11: Bye Bye [preauth]
Sep 18 01:40:59 nativespace-cdp sshd[3288345]: Disconnected from 24.199.116.10 port 35062 [preauth]
Sep 18 01:41:22 nativespace-cdp sshd[3288412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.193.212  user=mysql
Sep 18 01:41:22 nativespace-cdp sshd[3288412]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "mysql"
Sep 18 01:41:24 nativespace-cdp sshd[3288412]: Failed password for mysql from 165.227.193.212 port 37980 ssh2
Sep 18 01:41:24 nativespace-cdp sshd[3288412]: Received disconnect from 165.227.193.212 port 37980:11: Bye Bye [preauth]
Sep 18 01:41:24 nativespace-cdp sshd[3288412]: Disconnected from 165.227.193.212 port 37980 [preauth]
Sep 18 01:41:33 nativespace-cdp sshd[3288532]: Connection closed by 159.100.136.21 port 38446 [preauth]
Sep 18 01:41:42 nativespace-cdp sshd[3288555]: Invalid user user from 185.100.53.71 port 35382
Sep 18 01:41:42 nativespace-cdp sshd[3288555]: input_userauth_request: invalid user user [preauth]
Sep 18 01:41:42 nativespace-cdp sshd[3288555]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:41:42 nativespace-cdp sshd[3288555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.100.53.71
Sep 18 01:41:44 nativespace-cdp sshd[3288555]: Failed password for invalid user user from 185.100.53.71 port 35382 ssh2
Sep 18 01:41:55 nativespace-cdp sshd[3288555]: Received disconnect from 185.100.53.71 port 35382:11: Bye Bye [preauth]
Sep 18 01:41:55 nativespace-cdp sshd[3288555]: Disconnected from 185.100.53.71 port 35382 [preauth]
Sep 18 01:43:37 nativespace-cdp sshd[3288845]: Invalid user user1 from 146.190.103.233 port 54346
Sep 18 01:43:37 nativespace-cdp sshd[3288845]: input_userauth_request: invalid user user1 [preauth]
Sep 18 01:43:37 nativespace-cdp sshd[3288845]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:43:37 nativespace-cdp sshd[3288845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.103.233
Sep 18 01:43:39 nativespace-cdp sshd[3288845]: Failed password for invalid user user1 from 146.190.103.233 port 54346 ssh2
Sep 18 01:43:39 nativespace-cdp sshd[3288845]: Received disconnect from 146.190.103.233 port 54346:11: Bye Bye [preauth]
Sep 18 01:43:39 nativespace-cdp sshd[3288845]: Disconnected from 146.190.103.233 port 54346 [preauth]
Sep 18 01:44:01 nativespace-cdp sshd[3288903]: Invalid user test from 202.46.27.79 port 50352
Sep 18 01:44:01 nativespace-cdp sshd[3288903]: input_userauth_request: invalid user test [preauth]
Sep 18 01:44:01 nativespace-cdp sshd[3288903]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:44:01 nativespace-cdp sshd[3288903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.27.79
Sep 18 01:44:03 nativespace-cdp sshd[3288903]: Failed password for invalid user test from 202.46.27.79 port 50352 ssh2
Sep 18 01:44:03 nativespace-cdp sshd[3288903]: Received disconnect from 202.46.27.79 port 50352:11: Bye Bye [preauth]
Sep 18 01:44:03 nativespace-cdp sshd[3288903]: Disconnected from 202.46.27.79 port 50352 [preauth]
Sep 18 01:46:34 nativespace-cdp sshd[3289546]: Connection closed by 159.100.136.21 port 47242 [preauth]
Sep 18 01:46:43 nativespace-cdp sshd[3289567]: Invalid user postgres from 24.199.116.10 port 34628
Sep 18 01:46:43 nativespace-cdp sshd[3289567]: input_userauth_request: invalid user postgres [preauth]
Sep 18 01:46:43 nativespace-cdp sshd[3289567]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:46:43 nativespace-cdp sshd[3289567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.116.10
Sep 18 01:46:44 nativespace-cdp sshd[3289567]: Failed password for invalid user postgres from 24.199.116.10 port 34628 ssh2
Sep 18 01:46:44 nativespace-cdp sshd[3289567]: Received disconnect from 24.199.116.10 port 34628:11: Bye Bye [preauth]
Sep 18 01:46:44 nativespace-cdp sshd[3289567]: Disconnected from 24.199.116.10 port 34628 [preauth]
Sep 18 01:46:59 nativespace-cdp sshd[3289620]: Invalid user cloud from 165.227.193.212 port 36944
Sep 18 01:46:59 nativespace-cdp sshd[3289620]: input_userauth_request: invalid user cloud [preauth]
Sep 18 01:46:59 nativespace-cdp sshd[3289620]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:46:59 nativespace-cdp sshd[3289620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.193.212
Sep 18 01:47:01 nativespace-cdp sshd[3289620]: Failed password for invalid user cloud from 165.227.193.212 port 36944 ssh2
Sep 18 01:47:03 nativespace-cdp sshd[3289620]: Received disconnect from 165.227.193.212 port 36944:11: Bye Bye [preauth]
Sep 18 01:47:03 nativespace-cdp sshd[3289620]: Disconnected from 165.227.193.212 port 36944 [preauth]
Sep 18 01:47:06 nativespace-cdp sshd[3289648]: Invalid user deploy from 185.100.53.71 port 54326
Sep 18 01:47:06 nativespace-cdp sshd[3289648]: input_userauth_request: invalid user deploy [preauth]
Sep 18 01:47:06 nativespace-cdp sshd[3289648]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:06 nativespace-cdp sshd[3289648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.100.53.71
Sep 18 01:47:07 nativespace-cdp sshd[3289648]: Failed password for invalid user deploy from 185.100.53.71 port 54326 ssh2
Sep 18 01:47:07 nativespace-cdp sshd[3289648]: Received disconnect from 185.100.53.71 port 54326:11: Bye Bye [preauth]
Sep 18 01:47:07 nativespace-cdp sshd[3289648]: Disconnected from 185.100.53.71 port 54326 [preauth]
Sep 18 01:47:25 nativespace-cdp sshd[3289726]: Invalid user admin from 24.199.116.10 port 46790
Sep 18 01:47:25 nativespace-cdp sshd[3289726]: input_userauth_request: invalid user admin [preauth]
Sep 18 01:47:25 nativespace-cdp sshd[3289726]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:25 nativespace-cdp sshd[3289726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.116.10
Sep 18 01:47:27 nativespace-cdp sshd[3289726]: Failed password for invalid user admin from 24.199.116.10 port 46790 ssh2
Sep 18 01:47:28 nativespace-cdp sshd[3289758]: Invalid user user from 202.46.27.79 port 37816
Sep 18 01:47:28 nativespace-cdp sshd[3289758]: input_userauth_request: invalid user user [preauth]
Sep 18 01:47:28 nativespace-cdp sshd[3289758]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:28 nativespace-cdp sshd[3289758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.27.79
Sep 18 01:47:30 nativespace-cdp sshd[3289767]: Invalid user user from 146.190.103.233 port 54682
Sep 18 01:47:30 nativespace-cdp sshd[3289767]: input_userauth_request: invalid user user [preauth]
Sep 18 01:47:30 nativespace-cdp sshd[3289767]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:30 nativespace-cdp sshd[3289767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.103.233
Sep 18 01:47:30 nativespace-cdp sshd[3289758]: Failed password for invalid user user from 202.46.27.79 port 37816 ssh2
Sep 18 01:47:30 nativespace-cdp sshd[3289758]: Received disconnect from 202.46.27.79 port 37816:11: Bye Bye [preauth]
Sep 18 01:47:30 nativespace-cdp sshd[3289758]: Disconnected from 202.46.27.79 port 37816 [preauth]
Sep 18 01:47:32 nativespace-cdp sshd[3289767]: Failed password for invalid user user from 146.190.103.233 port 54682 ssh2
Sep 18 01:47:32 nativespace-cdp sshd[3289767]: Received disconnect from 146.190.103.233 port 54682:11: Bye Bye [preauth]
Sep 18 01:47:32 nativespace-cdp sshd[3289767]: Disconnected from 146.190.103.233 port 54682 [preauth]
Sep 18 01:47:32 nativespace-cdp sshd[3289775]: Invalid user user from 103.76.120.31 port 50140
Sep 18 01:47:32 nativespace-cdp sshd[3289775]: input_userauth_request: invalid user user [preauth]
Sep 18 01:47:32 nativespace-cdp sshd[3289775]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:32 nativespace-cdp sshd[3289775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.120.31
Sep 18 01:47:34 nativespace-cdp sshd[3289775]: Failed password for invalid user user from 103.76.120.31 port 50140 ssh2
Sep 18 01:47:38 nativespace-cdp sshd[3289800]: Invalid user git from 165.227.193.212 port 49020
Sep 18 01:47:38 nativespace-cdp sshd[3289800]: input_userauth_request: invalid user git [preauth]
Sep 18 01:47:38 nativespace-cdp sshd[3289800]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:38 nativespace-cdp sshd[3289800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.193.212
Sep 18 01:47:39 nativespace-cdp sshd[3289775]: Received disconnect from 103.76.120.31 port 50140:11: Bye Bye [preauth]
Sep 18 01:47:39 nativespace-cdp sshd[3289775]: Disconnected from 103.76.120.31 port 50140 [preauth]
Sep 18 01:47:40 nativespace-cdp sshd[3289800]: Failed password for invalid user git from 165.227.193.212 port 49020 ssh2
Sep 18 01:47:40 nativespace-cdp sshd[3289800]: Received disconnect from 165.227.193.212 port 49020:11: Bye Bye [preauth]
Sep 18 01:47:40 nativespace-cdp sshd[3289800]: Disconnected from 165.227.193.212 port 49020 [preauth]
Sep 18 01:47:49 nativespace-cdp sshd[3289919]: Invalid user hadoop from 185.100.53.71 port 57774
Sep 18 01:47:49 nativespace-cdp sshd[3289919]: input_userauth_request: invalid user hadoop [preauth]
Sep 18 01:47:49 nativespace-cdp sshd[3289919]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:47:49 nativespace-cdp sshd[3289919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.100.53.71
Sep 18 01:47:51 nativespace-cdp sshd[3289919]: Failed password for invalid user hadoop from 185.100.53.71 port 57774 ssh2
Sep 18 01:47:51 nativespace-cdp sshd[3289919]: Received disconnect from 185.100.53.71 port 57774:11: Bye Bye [preauth]
Sep 18 01:47:51 nativespace-cdp sshd[3289919]: Disconnected from 185.100.53.71 port 57774 [preauth]
Sep 18 01:48:15 nativespace-cdp sshd[3290023]: Invalid user es from 202.46.27.79 port 60574
Sep 18 01:48:15 nativespace-cdp sshd[3290023]: input_userauth_request: invalid user es [preauth]
Sep 18 01:48:15 nativespace-cdp sshd[3290023]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:48:15 nativespace-cdp sshd[3290023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.27.79
Sep 18 01:48:18 nativespace-cdp sshd[3290023]: Failed password for invalid user es from 202.46.27.79 port 60574 ssh2
Sep 18 01:48:21 nativespace-cdp sshd[3290054]: Invalid user cloud from 146.190.103.233 port 58118
Sep 18 01:48:21 nativespace-cdp sshd[3290054]: input_userauth_request: invalid user cloud [preauth]
Sep 18 01:48:21 nativespace-cdp sshd[3290054]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:48:21 nativespace-cdp sshd[3290054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.103.233
Sep 18 01:48:23 nativespace-cdp sshd[3290054]: Failed password for invalid user cloud from 146.190.103.233 port 58118 ssh2
Sep 18 01:49:10 nativespace-cdp sshd[3290232]: Received disconnect from 103.76.120.31 port 60896:11: Bye Bye [preauth]
Sep 18 01:49:10 nativespace-cdp sshd[3290232]: Disconnected from 103.76.120.31 port 60896 [preauth]
Sep 18 01:50:08 nativespace-cdp sshd[3290604]: Invalid user git from 103.76.120.31 port 50898
Sep 18 01:50:08 nativespace-cdp sshd[3290604]: input_userauth_request: invalid user git [preauth]
Sep 18 01:50:08 nativespace-cdp sshd[3290604]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:50:08 nativespace-cdp sshd[3290604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.120.31
Sep 18 01:50:11 nativespace-cdp sshd[3290604]: Failed password for invalid user git from 103.76.120.31 port 50898 ssh2
Sep 18 01:50:11 nativespace-cdp sshd[3290604]: Received disconnect from 103.76.120.31 port 50898:11: Bye Bye [preauth]
Sep 18 01:50:11 nativespace-cdp sshd[3290604]: Disconnected from 103.76.120.31 port 50898 [preauth]
Sep 18 01:51:00 nativespace-cdp sshd[3290804]: Invalid user user from 103.76.120.31 port 54184
Sep 18 01:51:00 nativespace-cdp sshd[3290804]: input_userauth_request: invalid user user [preauth]
Sep 18 01:51:00 nativespace-cdp sshd[3290804]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 01:51:00 nativespace-cdp sshd[3290804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.120.31
Sep 18 01:51:02 nativespace-cdp sshd[3290804]: Failed password for invalid user user from 103.76.120.31 port 54184 ssh2
Sep 18 01:51:04 nativespace-cdp sshd[3290804]: Received disconnect from 103.76.120.31 port 54184:11: Bye Bye [preauth]
Sep 18 01:51:04 nativespace-cdp sshd[3290804]: Disconnected from 103.76.120.31 port 54184 [preauth]
Sep 18 01:51:34 nativespace-cdp sshd[3291060]: Connection closed by 159.100.136.21 port 56362 [preauth]
Sep 18 01:56:33 nativespace-cdp sshd[3292359]: Connection closed by 159.100.136.21 port 37098 [preauth]
Sep 18 02:01:33 nativespace-cdp sshd[3293597]: Connection closed by 159.100.136.21 port 45978 [preauth]
Sep 18 02:03:39 nativespace-cdp sshd[3294563]: Invalid user radmin from 181.55.188.218 port 60974
Sep 18 02:03:39 nativespace-cdp sshd[3294563]: input_userauth_request: invalid user radmin [preauth]
Sep 18 02:03:39 nativespace-cdp sshd[3294563]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 02:03:39 nativespace-cdp sshd[3294563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.218
Sep 18 02:03:41 nativespace-cdp sshd[3294563]: Failed password for invalid user radmin from 181.55.188.218 port 60974 ssh2
Sep 18 02:03:41 nativespace-cdp sshd[3294563]: Received disconnect from 181.55.188.218 port 60974:11: Bye Bye [preauth]
Sep 18 02:03:41 nativespace-cdp sshd[3294563]: Disconnected from 181.55.188.218 port 60974 [preauth]
Sep 18 02:07:15 nativespace-cdp sshd[3295663]: Invalid user ubuntu from 181.55.188.218 port 40382
Sep 18 02:07:15 nativespace-cdp sshd[3295663]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 02:07:15 nativespace-cdp sshd[3295663]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 02:07:15 nativespace-cdp sshd[3295663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.218
Sep 18 02:07:18 nativespace-cdp sshd[3295663]: Failed password for invalid user ubuntu from 181.55.188.218 port 40382 ssh2
Sep 18 02:07:18 nativespace-cdp sshd[3295663]: Received disconnect from 181.55.188.218 port 40382:11: Bye Bye [preauth]
Sep 18 02:07:18 nativespace-cdp sshd[3295663]: Disconnected from 181.55.188.218 port 40382 [preauth]
Sep 18 02:08:00 nativespace-cdp sshd[3295959]: Invalid user git from 181.55.188.218 port 53042
Sep 18 02:08:00 nativespace-cdp sshd[3295959]: input_userauth_request: invalid user git [preauth]
Sep 18 02:08:00 nativespace-cdp sshd[3295959]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 02:08:00 nativespace-cdp sshd[3295959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.218
Sep 18 02:08:02 nativespace-cdp sshd[3295959]: Failed password for invalid user git from 181.55.188.218 port 53042 ssh2
Sep 18 02:08:04 nativespace-cdp sshd[3295959]: Received disconnect from 181.55.188.218 port 53042:11: Bye Bye [preauth]
Sep 18 02:08:04 nativespace-cdp sshd[3295959]: Disconnected from 181.55.188.218 port 53042 [preauth]
Sep 18 02:09:04 nativespace-cdp sshd[3296378]: Invalid user deployer from 47.254.240.244 port 56742
Sep 18 02:09:04 nativespace-cdp sshd[3296378]: input_userauth_request: invalid user deployer [preauth]
Sep 18 02:09:04 nativespace-cdp sshd[3296378]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 02:09:04 nativespace-cdp sshd[3296378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.240.244
Sep 18 02:09:06 nativespace-cdp sshd[3296378]: Failed password for invalid user deployer from 47.254.240.244 port 56742 ssh2
Sep 18 02:09:06 nativespace-cdp sshd[3296378]: Received disconnect from 47.254.240.244 port 56742:11: Bye Bye [preauth]
Sep 18 02:09:06 nativespace-cdp sshd[3296378]: Disconnected from 47.254.240.244 port 56742 [preauth]
Sep 18 02:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 02:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:19 nativespace-cdp sudo[3296569]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 02:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:19 nativespace-cdp sudo[3296573]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 02:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:20 nativespace-cdp sudo[3296576]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:20 nativespace-cdp sudo[3296587]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 02:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296590]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296597]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296600]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296603]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296606]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296609]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:22 nativespace-cdp sudo[3296613]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:24 nativespace-cdp sudo[3296636]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:24 nativespace-cdp sudo[3296641]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ladburyp user-2=dancinggardener user-3=stagingerris user-4=kategilpin user-5=design user-6=oubpgvbx user-7=tstardom user-8=what user-9=sketchy user-10=cath user-11=havantho user-12=nvihkvu user-13=bakery user-14=sosevalu user-15=crrtipdl user-16=nove user-17=boldover user-18=outdoorc user-19=ranxterc user-20=hodgsonmail user-21=branko user-22=romaldki user-23=attlebor user-24=lucy user-25=onlycont user-26=chrisdal user-27=mcdermos user-28=careers user-29=nbhavers user-30=david user-31=tomandle user-32=jennimil user-33=hirefootballgame user-34=eugincou user-35=courseme user-36=cathski user-37=cambria1 user-38=ninejimm user-39=reliable user-40=paulmca1 user-41=pugwash user-42=howardon user-43=cwsocial user-44=smrszyqg user-45=isleofwi user-46=hidden user-47=nomistakes user-48=barbersh
Sep 18 02:09:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tigerlet user-50=nscdp user-51=health2045 user-52=fortunaz user-53=foods user-54=leftie user-55=lkpier user-56=ctedorgu user-57=philmcph user-58=firstre5 user-59=steakbridieme user-60=donnychicago user-61=beauty user-62=eatspam user-63=darkstar user-64=dhyana user-65=burydropin user-66=fawcettd user-67=nsceres user-68=bwppodcast user-69=zebrapho user-70=steve user-71=asandcoc user-72=sibtoncc user-73=innovat1 user-74=stuartge user-75=askhform user-76=nativene user-77=skyfirec user-78=alexadmin user-79=bedfords user-80=ggaaorgu user-81=belle user-82=newstoda user-83=bemadonn user-84=brighto1 user-85=nstriton user-86=firstre2 user-87=vivienn1 user-88=battlere user-89=oneoarco user-90=accooper user-91=ianrayne user-92=connectedshoppin user-93=thqkgnbz user-94=gilpin user-95=milloyco user-96=elecleis user-97=hubmaster user-98=carsinyo user-99=fetch user-100=clarkass user-101=firstrel user-102=costestimatorco
Sep 18 02:09:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstred user-104=southlon user-105=highlegh user-106=jonhartl user-107=seftvta user-108=ultbcrra user-109=firstres user-110=opaiscyx user-111=coursemc user-112=lbhyisi user-113=hhdugcor user-114=magichat user-115=martsblo user-116=dickemery123 user-117=ptkxhsbt user-118=wilsonsw user-119=musorguk user-120=megacards user-121=lakesan1 user-122=brmrjxl user-123=strathar user-124=sarafoundation user-125=atestord user-126=still user-127=agproduc user-128=stephani user-129=leereyn1 user-130=jarvisin user-131=spectrum user-132=hodgesonweb user-133=theblack user-134=ulsukarm user-135=booff user-136=markward user-137=foundation user-138=connect9 user-139=athenare user-140=vantagep user-141=maflemin user-142=lbscrmod feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 02:09:24 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:25 nativespace-cdp sudo[3296655]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:25 nativespace-cdp sudo[3296665]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-itDkrAI1UKwvktZ9.~
Sep 18 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:25 nativespace-cdp sudo[3296668]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-itDkrAI1UKwvktZ9.~'
Sep 18 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:25 nativespace-cdp sudo[3296674]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-itDkrAI1UKwvktZ9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:25 nativespace-cdp sudo[3296678]: pam_unix(sudo:session): session closed for user root
Sep 18 02:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 02:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:09:25 nativespace-cdp sudo[3296681]: pam_unix(sudo:session): session closed for user root
Sep 18 02:11:33 nativespace-cdp sshd[3297455]: Connection closed by 159.100.136.21 port 36120 [preauth]
Sep 18 02:14:06 nativespace-cdp sshd[3297937]: Connection closed by 47.254.240.244 port 33108 [preauth]
Sep 18 02:16:05 nativespace-cdp sshd[3298405]: Invalid user es from 47.254.240.244 port 46696
Sep 18 02:16:05 nativespace-cdp sshd[3298405]: input_userauth_request: invalid user es [preauth]
Sep 18 02:16:05 nativespace-cdp sshd[3298405]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 02:16:05 nativespace-cdp sshd[3298405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.240.244
Sep 18 02:16:08 nativespace-cdp sshd[3298405]: Failed password for invalid user es from 47.254.240.244 port 46696 ssh2
Sep 18 02:16:10 nativespace-cdp sshd[3298405]: Received disconnect from 47.254.240.244 port 46696:11: Bye Bye [preauth]
Sep 18 02:16:10 nativespace-cdp sshd[3298405]: Disconnected from 47.254.240.244 port 46696 [preauth]
Sep 18 02:16:34 nativespace-cdp sshd[3298525]: Connection closed by 159.100.136.21 port 45558 [preauth]
Sep 18 02:17:46 nativespace-cdp sshd[3298829]: Invalid user amir from 47.254.240.244 port 60284
Sep 18 02:17:46 nativespace-cdp sshd[3298829]: input_userauth_request: invalid user amir [preauth]
Sep 18 02:17:46 nativespace-cdp sshd[3298829]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 02:17:46 nativespace-cdp sshd[3298829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.240.244
Sep 18 02:17:49 nativespace-cdp sshd[3298829]: Failed password for invalid user amir from 47.254.240.244 port 60284 ssh2
Sep 18 02:21:33 nativespace-cdp sshd[3299982]: Connection closed by 159.100.136.21 port 54810 [preauth]
Sep 18 02:26:36 nativespace-cdp sshd[3301145]: Connection closed by 159.100.136.21 port 36410 [preauth]
Sep 18 02:31:33 nativespace-cdp sshd[3302216]: Connection closed by 159.100.136.21 port 45102 [preauth]
Sep 18 02:36:33 nativespace-cdp sshd[3303792]: Connection closed by 159.100.136.21 port 54602 [preauth]
Sep 18 02:41:33 nativespace-cdp sshd[3304862]: Connection closed by 159.100.136.21 port 35372 [preauth]
Sep 18 02:46:36 nativespace-cdp sshd[3305898]: Connection closed by 159.100.136.21 port 44448 [preauth]
Sep 18 02:51:36 nativespace-cdp sshd[3307053]: Connection closed by 159.100.136.21 port 53214 [preauth]
Sep 18 02:53:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 02:53:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 02:53:02 nativespace-cdp sudo[3307643]: pam_unix(sudo:session): session closed for user root
Sep 18 02:56:33 nativespace-cdp sshd[3308544]: Connection closed by 159.100.136.21 port 34070 [preauth]
Sep 18 03:01:33 nativespace-cdp sshd[3309721]: Connection closed by 159.100.136.21 port 42944 [preauth]
Sep 18 03:06:33 nativespace-cdp sshd[3311080]: Connection closed by 159.100.136.21 port 52284 [preauth]
Sep 18 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:19 nativespace-cdp sudo[3311739]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:19 nativespace-cdp sudo[3311743]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:19 nativespace-cdp sudo[3311750]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:19 nativespace-cdp sudo[3311793]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 03:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311796]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311852]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311855]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311858]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311862]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311865]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:21 nativespace-cdp sudo[3311868]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311881]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311885]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=zebrapho user-2=bwppodcast user-3=steve user-4=sibtoncc user-5=asandcoc user-6=darkstar user-7=eatspam user-8=beauty user-9=dhyana user-10=fawcettd user-11=burydropin user-12=nsceres user-13=smrszyqg user-14=isleofwi user-15=barbersh user-16=tigerlet user-17=nomistakes user-18=hidden user-19=foods user-20=leftie user-21=fortunaz user-22=health2045 user-23=nscdp user-24=steakbridieme user-25=firstre5 user-26=donnychicago user-27=philmcph user-28=ctedorgu user-29=lkpier user-30=hirefootballgame user-31=courseme user-32=eugincou user-33=ninejimm user-34=reliable user-35=cathski user-36=cambria1 user-37=cwsocial user-38=paulmca1 user-39=howardon user-40=pugwash user-41=mcdermos user-42=chrisdal user-43=david user-44=nbhavers user-45=careers user-46=tomandle user-47=jennimil user-48=branko
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ranxterc user-50=hodgsonmail user-51=outdoorc user-52=romaldki user-53=lucy user-54=attlebor user-55=onlycont user-56=crrtipdl user-57=sosevalu user-58=bakery user-59=nove user-60=boldover user-61=kategilpin user-62=stagingerris user-63=dancinggardener user-64=ladburyp user-65=design user-66=what user-67=oubpgvbx user-68=tstardom user-69=nvihkvu user-70=havantho user-71=sketchy user-72=cath user-73=ulsukarm user-74=foundation user-75=booff user-76=markward user-77=lbscrmod user-78=maflemin user-79=vantagep user-80=athenare user-81=connect9 user-82=agproduc user-83=still user-84=leereyn1 user-85=stephani user-86=jarvisin user-87=hodgesonweb user-88=theblack user-89=spectrum user-90=wilsonsw user-91=megacards user-92=musorguk user-93=brmrjxl user-94=lakesan1 user-95=atestord user-96=sarafoundation user-97=strathar user-98=hhdugcor user-99=lbhyisi user-100=magichat user-101=martsblo user-102=ptkxhsbt
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=dickemery123 user-104=costestimatorco user-105=firstrel user-106=clarkass user-107=highlegh user-108=southlon user-109=firstred user-110=firstres user-111=ultbcrra user-112=seftvta user-113=jonhartl user-114=opaiscyx user-115=coursemc user-116=ianrayne user-117=accooper user-118=thqkgnbz user-119=connectedshoppin user-120=elecleis user-121=milloyco user-122=gilpin user-123=fetch user-124=carsinyo user-125=hubmaster user-126=bedfords user-127=bemadonn user-128=newstoda user-129=ggaaorgu user-130=belle user-131=nstriton user-132=brighto1 user-133=oneoarco user-134=battlere user-135=vivienn1 user-136=firstre2 user-137=askhform user-138=stuartge user-139=innovat1 user-140=nativene user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311890]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311895]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ldare3ge2GH61RK4.~
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311898]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ldare3ge2GH61RK4.~'
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311901]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ldare3ge2GH61RK4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 03:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:26 nativespace-cdp sudo[3311905]: pam_unix(sudo:session): session closed for user root
Sep 18 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 03:09:27 nativespace-cdp sudo[3311908]: pam_unix(sudo:session): session closed for user root
Sep 18 03:11:35 nativespace-cdp sshd[3312421]: Connection closed by 159.100.136.21 port 33266 [preauth]
Sep 18 03:15:00 nativespace-cdp sshd[3313202]: Connection closed by 103.200.20.247 port 41232 [preauth]
Sep 18 03:15:12 nativespace-cdp sshd[3313376]: Received disconnect from 74.50.65.138 port 33638:11: Bye Bye [preauth]
Sep 18 03:15:12 nativespace-cdp sshd[3313376]: Disconnected from 74.50.65.138 port 33638 [preauth]
Sep 18 03:15:13 nativespace-cdp sshd[3313412]: Connection closed by 103.139.193.99 port 41082 [preauth]
Sep 18 03:16:36 nativespace-cdp sshd[3313744]: Invalid user user from 128.199.202.236 port 44318
Sep 18 03:16:36 nativespace-cdp sshd[3313744]: input_userauth_request: invalid user user [preauth]
Sep 18 03:16:36 nativespace-cdp sshd[3313744]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:16:36 nativespace-cdp sshd[3313744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.236
Sep 18 03:16:36 nativespace-cdp sshd[3313749]: Connection closed by 159.100.136.21 port 41370 [preauth]
Sep 18 03:16:37 nativespace-cdp sshd[3313744]: Failed password for invalid user user from 128.199.202.236 port 44318 ssh2
Sep 18 03:16:37 nativespace-cdp sshd[3313744]: Received disconnect from 128.199.202.236 port 44318:11: Bye Bye [preauth]
Sep 18 03:16:37 nativespace-cdp sshd[3313744]: Disconnected from 128.199.202.236 port 44318 [preauth]
Sep 18 03:16:45 nativespace-cdp sshd[3313768]: Invalid user deploy from 181.114.122.224 port 45540
Sep 18 03:16:45 nativespace-cdp sshd[3313768]: input_userauth_request: invalid user deploy [preauth]
Sep 18 03:16:45 nativespace-cdp sshd[3313768]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:16:45 nativespace-cdp sshd[3313768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.114.122.224
Sep 18 03:16:47 nativespace-cdp sshd[3313768]: Failed password for invalid user deploy from 181.114.122.224 port 45540 ssh2
Sep 18 03:16:47 nativespace-cdp sshd[3313768]: Received disconnect from 181.114.122.224 port 45540:11: Bye Bye [preauth]
Sep 18 03:16:47 nativespace-cdp sshd[3313768]: Disconnected from 181.114.122.224 port 45540 [preauth]
Sep 18 03:17:06 nativespace-cdp sshd[3313833]: Invalid user kms from 107.175.136.155 port 56824
Sep 18 03:17:06 nativespace-cdp sshd[3313833]: input_userauth_request: invalid user kms [preauth]
Sep 18 03:17:06 nativespace-cdp sshd[3313833]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:17:06 nativespace-cdp sshd[3313833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.136.155
Sep 18 03:17:08 nativespace-cdp sshd[3313833]: Failed password for invalid user kms from 107.175.136.155 port 56824 ssh2
Sep 18 03:17:08 nativespace-cdp sshd[3313833]: Received disconnect from 107.175.136.155 port 56824:11: Bye Bye [preauth]
Sep 18 03:17:08 nativespace-cdp sshd[3313833]: Disconnected from 107.175.136.155 port 56824 [preauth]
Sep 18 03:17:34 nativespace-cdp sshd[3313982]: Invalid user test01 from 74.50.65.138 port 54246
Sep 18 03:17:34 nativespace-cdp sshd[3313982]: input_userauth_request: invalid user test01 [preauth]
Sep 18 03:17:34 nativespace-cdp sshd[3313982]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:17:34 nativespace-cdp sshd[3313982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.50.65.138
Sep 18 03:17:36 nativespace-cdp sshd[3313982]: Failed password for invalid user test01 from 74.50.65.138 port 54246 ssh2
Sep 18 03:17:36 nativespace-cdp sshd[3313982]: Received disconnect from 74.50.65.138 port 54246:11: Bye Bye [preauth]
Sep 18 03:17:36 nativespace-cdp sshd[3313982]: Disconnected from 74.50.65.138 port 54246 [preauth]
Sep 18 03:18:09 nativespace-cdp sshd[3314576]: Invalid user dev2 from 107.175.136.155 port 44908
Sep 18 03:18:09 nativespace-cdp sshd[3314576]: input_userauth_request: invalid user dev2 [preauth]
Sep 18 03:18:09 nativespace-cdp sshd[3314576]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:18:09 nativespace-cdp sshd[3314576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.136.155
Sep 18 03:18:10 nativespace-cdp sshd[3314576]: Failed password for invalid user dev2 from 107.175.136.155 port 44908 ssh2
Sep 18 03:18:13 nativespace-cdp sshd[3314576]: Received disconnect from 107.175.136.155 port 44908:11: Bye Bye [preauth]
Sep 18 03:18:13 nativespace-cdp sshd[3314576]: Disconnected from 107.175.136.155 port 44908 [preauth]
Sep 18 03:18:17 nativespace-cdp sshd[3314597]: Invalid user vps from 74.50.65.138 port 60198
Sep 18 03:18:17 nativespace-cdp sshd[3314597]: input_userauth_request: invalid user vps [preauth]
Sep 18 03:18:17 nativespace-cdp sshd[3314597]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:18:17 nativespace-cdp sshd[3314597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.50.65.138
Sep 18 03:18:20 nativespace-cdp sshd[3314597]: Failed password for invalid user vps from 74.50.65.138 port 60198 ssh2
Sep 18 03:18:20 nativespace-cdp sshd[3314597]: Received disconnect from 74.50.65.138 port 60198:11: Bye Bye [preauth]
Sep 18 03:18:20 nativespace-cdp sshd[3314597]: Disconnected from 74.50.65.138 port 60198 [preauth]
Sep 18 03:18:20 nativespace-cdp sshd[3314608]: Invalid user admin from 128.199.202.236 port 53794
Sep 18 03:18:20 nativespace-cdp sshd[3314608]: input_userauth_request: invalid user admin [preauth]
Sep 18 03:18:20 nativespace-cdp sshd[3314608]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:18:20 nativespace-cdp sshd[3314608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.236
Sep 18 03:18:22 nativespace-cdp sshd[3314608]: Failed password for invalid user admin from 128.199.202.236 port 53794 ssh2
Sep 18 03:18:24 nativespace-cdp sshd[3314608]: Received disconnect from 128.199.202.236 port 53794:11: Bye Bye [preauth]
Sep 18 03:18:24 nativespace-cdp sshd[3314608]: Disconnected from 128.199.202.236 port 53794 [preauth]
Sep 18 03:18:41 nativespace-cdp sshd[3314657]: Invalid user deployhq from 181.114.122.224 port 38164
Sep 18 03:18:41 nativespace-cdp sshd[3314657]: input_userauth_request: invalid user deployhq [preauth]
Sep 18 03:18:41 nativespace-cdp sshd[3314657]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:18:41 nativespace-cdp sshd[3314657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.114.122.224
Sep 18 03:18:43 nativespace-cdp sshd[3314657]: Failed password for invalid user deployhq from 181.114.122.224 port 38164 ssh2
Sep 18 03:18:46 nativespace-cdp sshd[3314657]: Received disconnect from 181.114.122.224 port 38164:11: Bye Bye [preauth]
Sep 18 03:18:46 nativespace-cdp sshd[3314657]: Disconnected from 181.114.122.224 port 38164 [preauth]
Sep 18 03:18:50 nativespace-cdp sshd[3314692]: Invalid user dev from 107.175.136.155 port 58384
Sep 18 03:18:50 nativespace-cdp sshd[3314692]: input_userauth_request: invalid user dev [preauth]
Sep 18 03:18:50 nativespace-cdp sshd[3314692]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:18:50 nativespace-cdp sshd[3314692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.136.155
Sep 18 03:18:52 nativespace-cdp sshd[3314692]: Failed password for invalid user dev from 107.175.136.155 port 58384 ssh2
Sep 18 03:18:59 nativespace-cdp sshd[3314736]: Invalid user user from 74.50.65.138 port 60154
Sep 18 03:18:59 nativespace-cdp sshd[3314736]: input_userauth_request: invalid user user [preauth]
Sep 18 03:18:59 nativespace-cdp sshd[3314736]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:18:59 nativespace-cdp sshd[3314736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.50.65.138
Sep 18 03:19:01 nativespace-cdp sshd[3314736]: Failed password for invalid user user from 74.50.65.138 port 60154 ssh2
Sep 18 03:19:01 nativespace-cdp sshd[3314736]: Received disconnect from 74.50.65.138 port 60154:11: Bye Bye [preauth]
Sep 18 03:19:01 nativespace-cdp sshd[3314736]: Disconnected from 74.50.65.138 port 60154 [preauth]
Sep 18 03:19:11 nativespace-cdp sshd[3314808]: Invalid user db2fenc1 from 128.199.202.236 port 36872
Sep 18 03:19:11 nativespace-cdp sshd[3314808]: input_userauth_request: invalid user db2fenc1 [preauth]
Sep 18 03:19:11 nativespace-cdp sshd[3314808]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:19:11 nativespace-cdp sshd[3314808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.236
Sep 18 03:19:13 nativespace-cdp sshd[3314808]: Failed password for invalid user db2fenc1 from 128.199.202.236 port 36872 ssh2
Sep 18 03:19:17 nativespace-cdp sshd[3314808]: Received disconnect from 128.199.202.236 port 36872:11: Bye Bye [preauth]
Sep 18 03:19:17 nativespace-cdp sshd[3314808]: Disconnected from 128.199.202.236 port 36872 [preauth]
Sep 18 03:19:31 nativespace-cdp sshd[3314891]: Invalid user sftp from 181.114.122.224 port 50386
Sep 18 03:19:31 nativespace-cdp sshd[3314891]: input_userauth_request: invalid user sftp [preauth]
Sep 18 03:19:31 nativespace-cdp sshd[3314891]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:19:31 nativespace-cdp sshd[3314891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.114.122.224
Sep 18 03:19:33 nativespace-cdp sshd[3314891]: Failed password for invalid user sftp from 181.114.122.224 port 50386 ssh2
Sep 18 03:21:33 nativespace-cdp sshd[3315425]: Connection closed by 159.100.136.21 port 49474 [preauth]
Sep 18 03:26:33 nativespace-cdp sshd[3316462]: Connection closed by 159.100.136.21 port 58134 [preauth]
Sep 18 03:27:42 nativespace-cdp sshd[3316697]: Connection closed by 159.223.55.221 port 46636 [preauth]
Sep 18 03:27:52 nativespace-cdp sshd[3316746]: Invalid user test from 198.57.248.56 port 60318
Sep 18 03:27:52 nativespace-cdp sshd[3316746]: input_userauth_request: invalid user test [preauth]
Sep 18 03:27:52 nativespace-cdp sshd[3316746]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:27:52 nativespace-cdp sshd[3316746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.57.248.56
Sep 18 03:27:54 nativespace-cdp sshd[3316746]: Failed password for invalid user test from 198.57.248.56 port 60318 ssh2
Sep 18 03:27:57 nativespace-cdp sshd[3316746]: Received disconnect from 198.57.248.56 port 60318:11: Bye Bye [preauth]
Sep 18 03:27:57 nativespace-cdp sshd[3316746]: Disconnected from 198.57.248.56 port 60318 [preauth]
Sep 18 03:28:22 nativespace-cdp sshd[3316842]: Invalid user debian from 164.68.102.81 port 48914
Sep 18 03:28:22 nativespace-cdp sshd[3316842]: input_userauth_request: invalid user debian [preauth]
Sep 18 03:28:22 nativespace-cdp sshd[3316842]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:28:22 nativespace-cdp sshd[3316842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.102.81
Sep 18 03:28:25 nativespace-cdp sshd[3316842]: Failed password for invalid user debian from 164.68.102.81 port 48914 ssh2
Sep 18 03:28:25 nativespace-cdp sshd[3316842]: Received disconnect from 164.68.102.81 port 48914:11: Bye Bye [preauth]
Sep 18 03:28:25 nativespace-cdp sshd[3316842]: Disconnected from 164.68.102.81 port 48914 [preauth]
Sep 18 03:30:21 nativespace-cdp sshd[3317368]: Invalid user user from 141.95.162.177 port 37318
Sep 18 03:30:21 nativespace-cdp sshd[3317368]: input_userauth_request: invalid user user [preauth]
Sep 18 03:30:21 nativespace-cdp sshd[3317368]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:30:21 nativespace-cdp sshd[3317368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.95.162.177
Sep 18 03:30:23 nativespace-cdp sshd[3317368]: Failed password for invalid user user from 141.95.162.177 port 37318 ssh2
Sep 18 03:30:23 nativespace-cdp sshd[3317368]: Received disconnect from 141.95.162.177 port 37318:11: Bye Bye [preauth]
Sep 18 03:30:23 nativespace-cdp sshd[3317368]: Disconnected from 141.95.162.177 port 37318 [preauth]
Sep 18 03:31:34 nativespace-cdp sshd[3317633]: Connection closed by 159.100.136.21 port 38928 [preauth]
Sep 18 03:31:45 nativespace-cdp sshd[3317642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.57.248.56  user=root
Sep 18 03:31:45 nativespace-cdp sshd[3317642]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 18 03:31:46 nativespace-cdp sshd[3317655]: Invalid user user from 141.95.162.177 port 45020
Sep 18 03:31:46 nativespace-cdp sshd[3317655]: input_userauth_request: invalid user user [preauth]
Sep 18 03:31:46 nativespace-cdp sshd[3317655]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:31:46 nativespace-cdp sshd[3317655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.95.162.177
Sep 18 03:31:47 nativespace-cdp sshd[3317642]: Failed password for root from 198.57.248.56 port 43686 ssh2
Sep 18 03:31:47 nativespace-cdp sshd[3317642]: Received disconnect from 198.57.248.56 port 43686:11: Bye Bye [preauth]
Sep 18 03:31:47 nativespace-cdp sshd[3317642]: Disconnected from 198.57.248.56 port 43686 [preauth]
Sep 18 03:31:49 nativespace-cdp sshd[3317655]: Failed password for invalid user user from 141.95.162.177 port 45020 ssh2
Sep 18 03:31:49 nativespace-cdp sshd[3317655]: Received disconnect from 141.95.162.177 port 45020:11: Bye Bye [preauth]
Sep 18 03:31:49 nativespace-cdp sshd[3317655]: Disconnected from 141.95.162.177 port 45020 [preauth]
Sep 18 03:32:06 nativespace-cdp sshd[3317706]: Invalid user ansible from 164.68.102.81 port 55994
Sep 18 03:32:06 nativespace-cdp sshd[3317706]: input_userauth_request: invalid user ansible [preauth]
Sep 18 03:32:06 nativespace-cdp sshd[3317706]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:32:06 nativespace-cdp sshd[3317706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.102.81
Sep 18 03:32:08 nativespace-cdp sshd[3317706]: Failed password for invalid user ansible from 164.68.102.81 port 55994 ssh2
Sep 18 03:32:08 nativespace-cdp sshd[3317706]: Received disconnect from 164.68.102.81 port 55994:11: Bye Bye [preauth]
Sep 18 03:32:08 nativespace-cdp sshd[3317706]: Disconnected from 164.68.102.81 port 55994 [preauth]
Sep 18 03:32:24 nativespace-cdp sshd[3317845]: Connection closed by 198.57.248.56 port 56294 [preauth]
Sep 18 03:32:27 nativespace-cdp sshd[3317852]: Invalid user test1 from 141.95.162.177 port 58870
Sep 18 03:32:27 nativespace-cdp sshd[3317852]: input_userauth_request: invalid user test1 [preauth]
Sep 18 03:32:27 nativespace-cdp sshd[3317852]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:32:27 nativespace-cdp sshd[3317852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.95.162.177
Sep 18 03:32:29 nativespace-cdp sshd[3317852]: Failed password for invalid user test1 from 141.95.162.177 port 58870 ssh2
Sep 18 03:32:29 nativespace-cdp sshd[3317852]: Received disconnect from 141.95.162.177 port 58870:11: Bye Bye [preauth]
Sep 18 03:32:29 nativespace-cdp sshd[3317852]: Disconnected from 141.95.162.177 port 58870 [preauth]
Sep 18 03:32:50 nativespace-cdp sshd[3318062]: Invalid user test1 from 164.68.102.81 port 39066
Sep 18 03:32:50 nativespace-cdp sshd[3318062]: input_userauth_request: invalid user test1 [preauth]
Sep 18 03:32:50 nativespace-cdp sshd[3318062]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:32:50 nativespace-cdp sshd[3318062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.102.81
Sep 18 03:32:52 nativespace-cdp sshd[3318062]: Failed password for invalid user test1 from 164.68.102.81 port 39066 ssh2
Sep 18 03:32:53 nativespace-cdp sshd[3318062]: Received disconnect from 164.68.102.81 port 39066:11: Bye Bye [preauth]
Sep 18 03:32:53 nativespace-cdp sshd[3318062]: Disconnected from 164.68.102.81 port 39066 [preauth]
Sep 18 03:32:59 nativespace-cdp sshd[3318101]: Invalid user ubuntu from 198.57.248.56 port 40666
Sep 18 03:32:59 nativespace-cdp sshd[3318101]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 03:32:59 nativespace-cdp sshd[3318101]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 03:32:59 nativespace-cdp sshd[3318101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.57.248.56
Sep 18 03:33:01 nativespace-cdp sshd[3318101]: Failed password for invalid user ubuntu from 198.57.248.56 port 40666 ssh2
Sep 18 03:33:04 nativespace-cdp sshd[3318101]: Received disconnect from 198.57.248.56 port 40666:11: Bye Bye [preauth]
Sep 18 03:33:04 nativespace-cdp sshd[3318101]: Disconnected from 198.57.248.56 port 40666 [preauth]
Sep 18 03:36:33 nativespace-cdp sshd[3319344]: Connection closed by 159.100.136.21 port 47050 [preauth]
Sep 18 03:41:33 nativespace-cdp sshd[3320719]: Connection closed by 159.100.136.21 port 56434 [preauth]
Sep 18 03:46:35 nativespace-cdp sshd[3321767]: Connection closed by 159.100.136.21 port 35782 [preauth]
Sep 18 03:51:33 nativespace-cdp sshd[3323317]: Connection closed by 159.100.136.21 port 44478 [preauth]
Sep 18 03:56:36 nativespace-cdp sshd[3324999]: Connection closed by 159.100.136.21 port 54452 [preauth]
Sep 18 04:01:33 nativespace-cdp sshd[3326338]: Connection closed by 159.100.136.21 port 35306 [preauth]
Sep 18 04:06:33 nativespace-cdp sshd[3327878]: Connection closed by 159.100.136.21 port 43450 [preauth]
Sep 18 04:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:29 nativespace-cdp sudo[3328454]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:29 nativespace-cdp sudo[3328457]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:30 nativespace-cdp sudo[3328461]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:30 nativespace-cdp sudo[3328470]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:33 nativespace-cdp sudo[3328474]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:34 nativespace-cdp sudo[3328486]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:34 nativespace-cdp sudo[3328490]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:34 nativespace-cdp sudo[3328493]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:34 nativespace-cdp sudo[3328496]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:34 nativespace-cdp sudo[3328500]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:34 nativespace-cdp sudo[3328504]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:36 nativespace-cdp sudo[3328523]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:36 nativespace-cdp sudo[3328528]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=attlebor user-2=lucy user-3=onlycont user-4=ranxterc user-5=outdoorc user-6=hodgsonmail user-7=branko user-8=romaldki user-9=tomandle user-10=jennimil user-11=chrisdal user-12=mcdermos user-13=nbhavers user-14=careers user-15=david user-16=tstardom user-17=oubpgvbx user-18=what user-19=cath user-20=sketchy user-21=havantho user-22=nvihkvu user-23=ladburyp user-24=stagingerris user-25=dancinggardener user-26=kategilpin user-27=design user-28=nove user-29=boldover user-30=bakery user-31=sosevalu user-32=crrtipdl user-33=burydropin user-34=fawcettd user-35=nsceres user-36=beauty user-37=eatspam user-38=darkstar user-39=dhyana user-40=asandcoc user-41=sibtoncc user-42=bwppodcast user-43=zebrapho user-44=steve user-45=cathski user-46=cambria1 user-47=ninejimm user-48=reliable user-49=paulmca1
Sep 18 04:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=pugwash user-51=howardon user-52=cwsocial user-53=hirefootballgame user-54=eugincou user-55=courseme user-56=nscdp user-57=health2045 user-58=fortunaz user-59=leftie user-60=foods user-61=lkpier user-62=philmcph user-63=ctedorgu user-64=firstre5 user-65=steakbridieme user-66=donnychicago user-67=smrszyqg user-68=isleofwi user-69=hidden user-70=nomistakes user-71=barbersh user-72=tigerlet user-73=gilpin user-74=milloyco user-75=elecleis user-76=hubmaster user-77=carsinyo user-78=fetch user-79=accooper user-80=ianrayne user-81=connectedshoppin user-82=thqkgnbz user-83=jonhartl user-84=seftvta user-85=ultbcrra user-86=firstres user-87=opaiscyx user-88=coursemc user-89=clarkass user-90=firstrel user-91=costestimatorco user-92=firstred user-93=southlon user-94=highlegh user-95=skyfirec user-96=alexadmin user-97=innovat1 user-98=stuartge user-99=askhform user-100=nativene user-101=brighto1 user-102=nstriton
Sep 18 04:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=vivienn1 user-105=battlere user-106=oneoarco user-107=bedfords user-108=belle user-109=ggaaorgu user-110=newstoda user-111=bemadonn user-112=jarvisin user-113=spectrum user-114=theblack user-115=hodgesonweb user-116=still user-117=agproduc user-118=stephani user-119=leereyn1 user-120=markward user-121=booff user-122=foundation user-123=athenare user-124=connect9 user-125=vantagep user-126=maflemin user-127=lbscrmod user-128=ulsukarm user-129=martsblo user-130=dickemery123 user-131=ptkxhsbt user-132=lbhyisi user-133=hhdugcor user-134=magichat user-135=lakesan1 user-136=brmrjxl user-137=strathar user-138=sarafoundation user-139=atestord user-140=wilsonsw user-141=musorguk user-142=megacards feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 04:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:37 nativespace-cdp sudo[3328533]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:38 nativespace-cdp sudo[3328541]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3tYoIUOZx6jen0lq.~
Sep 18 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:38 nativespace-cdp sudo[3328545]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3tYoIUOZx6jen0lq.~'
Sep 18 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:38 nativespace-cdp sudo[3328548]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3tYoIUOZx6jen0lq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:38 nativespace-cdp sudo[3328553]: pam_unix(sudo:session): session closed for user root
Sep 18 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:09:38 nativespace-cdp sudo[3328556]: pam_unix(sudo:session): session closed for user root
Sep 18 04:11:36 nativespace-cdp sshd[3329120]: Connection closed by 159.100.136.21 port 52394 [preauth]
Sep 18 04:16:33 nativespace-cdp sshd[3330164]: Connection closed by 159.100.136.21 port 33094 [preauth]
Sep 18 04:21:33 nativespace-cdp sshd[3331906]: Connection closed by 159.100.136.21 port 42216 [preauth]
Sep 18 04:26:34 nativespace-cdp sshd[3332935]: Connection closed by 159.100.136.21 port 51744 [preauth]
Sep 18 04:31:34 nativespace-cdp sshd[3334083]: Connection closed by 159.100.136.21 port 33012 [preauth]
Sep 18 04:36:27 nativespace-cdp sshd[3335867]: Connection closed by 159.100.136.21 port 42262 [preauth]
Sep 18 04:41:32 nativespace-cdp sshd[3338226]: Connection closed by 159.100.136.21 port 51270 [preauth]
Sep 18 04:46:34 nativespace-cdp sshd[3339609]: Connection closed by 159.100.136.21 port 60790 [preauth]
Sep 18 04:51:33 nativespace-cdp sshd[3341016]: Connection closed by 159.100.136.21 port 41846 [preauth]
Sep 18 04:56:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 04:56:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:18 nativespace-cdp sudo[3342216]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 04:56:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:18 nativespace-cdp sudo[3342226]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 04:56:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:22 nativespace-cdp sudo[3342237]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=askhform user-3=stuartge user-4=innovat1 user-5=skyfirec user-6=alexadmin user-7=bemadonn user-8=newstoda user-9=ggaaorgu user-10=belle user-11=bedfords user-12=oneoarco user-13=battlere user-14=vivienn1 user-15=firstre2 user-16=nstriton user-17=brighto1 user-18=thqkgnbz user-19=connectedshoppin user-20=ianrayne user-21=accooper user-22=fetch user-23=carsinyo user-24=hubmaster user-25=elecleis user-26=gilpin user-27=milloyco user-28=highlegh user-29=southlon user-30=firstred user-31=costestimatorco user-32=firstrel user-33=clarkass user-34=coursemc user-35=opaiscyx user-36=firstres user-37=ultbcrra user-38=seftvta user-39=jonhartl user-40=magichat user-41=hhdugcor user-42=lbhyisi user-43=ptkxhsbt user-44=dickemery123 user-45=martsblo user-46=megacards user-47=musorguk
Sep 18 04:56:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=atestord user-50=sarafoundation user-51=strathar user-52=lakesan1 user-53=brmrjxl user-54=leereyn1 user-55=stephani user-56=agproduc user-57=still user-58=theblack user-59=hodgesonweb user-60=spectrum user-61=jarvisin user-62=ulsukarm user-63=lbscrmod user-64=maflemin user-65=vantagep user-66=athenare user-67=connect9 user-68=foundation user-69=markward user-70=booff user-71=design user-72=kategilpin user-73=dancinggardener user-74=stagingerris user-75=ladburyp user-76=nvihkvu user-77=havantho user-78=cath user-79=sketchy user-80=what user-81=tstardom user-82=oubpgvbx user-83=crrtipdl user-84=sosevalu user-85=bakery user-86=boldover user-87=nove user-88=romaldki user-89=branko user-90=outdoorc user-91=hodgsonmail user-92=ranxterc user-93=onlycont user-94=lucy user-95=attlebor user-96=david user-97=careers user-98=nbhavers user-99=mcdermos user-100=chrisdal user-101=jennimil
Sep 18 04:56:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=courseme user-104=eugincou user-105=hirefootballgame user-106=cwsocial user-107=howardon user-108=pugwash user-109=paulmca1 user-110=ninejimm user-111=reliable user-112=cathski user-113=cambria1 user-114=barbersh user-115=tigerlet user-116=nomistakes user-117=hidden user-118=isleofwi user-119=smrszyqg user-120=firstre5 user-121=donnychicago user-122=steakbridieme user-123=ctedorgu user-124=philmcph user-125=lkpier user-126=foods user-127=leftie user-128=health2045 user-129=fortunaz user-130=nscdp user-131=dhyana user-132=darkstar user-133=eatspam user-134=beauty user-135=nsceres user-136=fawcettd user-137=burydropin user-138=steve user-139=zebrapho user-140=bwppodcast user-141=asandcoc user-142=sibtoncc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 04:56:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 04:56:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:23 nativespace-cdp sudo[3342242]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 18 04:56:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:25 nativespace-cdp sudo[3342247]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 18 04:56:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:25 nativespace-cdp sudo[3342253]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:34 nativespace-cdp sshd[3342291]: Connection closed by 159.100.136.21 port 51634 [preauth]
Sep 18 04:56:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 04:56:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:56:51 nativespace-cdp sudo[3342362]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:56:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 18 04:56:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:53 nativespace-cdp sudo[3342369]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 18 04:56:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:54 nativespace-cdp sudo[3342374]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 18 04:56:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:57 nativespace-cdp sudo[3342380]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 18 04:56:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:57 nativespace-cdp sudo[3342396]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 18 04:56:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:56:59 nativespace-cdp sudo[3342408]: pam_unix(sudo:session): session closed for user root
Sep 18 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 18 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:04 nativespace-cdp sudo[3342415]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 18 04:57:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:04 nativespace-cdp sudo[3342449]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 18 04:57:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:04 nativespace-cdp sudo[3342453]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 18 04:57:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:13 nativespace-cdp sudo[3342536]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:16 nativespace-cdp sudo[3342592]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:16 nativespace-cdp sudo[3342598]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 18 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:18 nativespace-cdp sudo[3342606]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 18 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 18 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 18 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:20 nativespace-cdp sudo[3342614]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:29 nativespace-cdp sudo[3342735]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:29 nativespace-cdp sudo[3342741]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:29 nativespace-cdp sudo[3342747]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 18 04:57:29 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 04:57:29 nativespace-cdp sudo[3342753]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 04:57:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 18 04:57:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:31 nativespace-cdp sudo[3342792]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 18 04:57:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:32 nativespace-cdp sudo[3342804]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:57:56 nativespace-cdp sudo[3342988]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:57:56 nativespace-cdp sudo[3342988]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 18 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:57 nativespace-cdp sudo[3342994]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 18 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:57 nativespace-cdp sudo[3342998]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 18 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:59 nativespace-cdp sudo[3343003]: pam_unix(sudo:session): session closed for user root
Sep 18 04:57:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 18 04:57:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:57:59 nativespace-cdp sudo[3343011]: pam_unix(sudo:session): session closed for user root
Sep 18 04:58:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 18 04:58:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:58:01 nativespace-cdp sudo[3343101]: pam_unix(sudo:session): session closed for user root
Sep 18 04:58:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 18 04:58:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:58:02 nativespace-cdp sudo[3343129]: pam_unix(sudo:session): session closed for user root
Sep 18 04:58:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 18 04:58:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:58:10 nativespace-cdp sudo[3343208]: pam_unix(sudo:session): session closed for user root
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:58:13 nativespace-cdp sudo[3343265]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:58:13 nativespace-cdp sudo[3343271]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 18 04:58:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:58:31 nativespace-cdp sudo[3343278]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 04:58:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:58:40 nativespace-cdp sudo[3343427]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:58:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:58:40 nativespace-cdp sudo[3343433]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 18 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:58:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 04:58:41 nativespace-cdp sudo[3343439]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 04:58:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 18 04:58:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:58:43 nativespace-cdp sudo[3343474]: pam_unix(sudo:session): session closed for user root
Sep 18 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 18 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:58:43 nativespace-cdp sudo[3343481]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 04:59:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 04:59:33 nativespace-cdp sudo[3343670]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 04:59:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 18 04:59:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:59:33 nativespace-cdp sudo[3343676]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 18 04:59:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:59:34 nativespace-cdp sudo[3343681]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 18 04:59:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:59:34 nativespace-cdp sudo[3343685]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 18 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:59:35 nativespace-cdp sudo[3343701]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 18 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:59:35 nativespace-cdp sudo[3343706]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 18 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 04:59:41 nativespace-cdp sudo[3343780]: pam_unix(sudo:session): session closed for user root
Sep 18 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 04:59:43 nativespace-cdp sudo[3343839]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 04:59:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 18 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 18 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 18 04:59:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:59:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 04:59:44 nativespace-cdp sudo[3343845]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 04:59:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 18 04:59:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 18 04:59:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 18 04:59:44 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:59:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 04:59:56 nativespace-cdp sudo[3343851]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 04:59:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 18 04:59:56 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 18 04:59:56 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 18 04:59:56 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 04:59:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 04:59:57 nativespace-cdp sudo[3343882]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 05:00:07 nativespace-cdp sudo[3344181]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 05:00:07 nativespace-cdp sudo[3344187]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 05:00:07 nativespace-cdp sudo[3344193]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 18 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 05:00:07 nativespace-cdp sudo[3344202]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 05:00:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 18 05:00:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:10 nativespace-cdp sudo[3344243]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 18 05:00:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:10 nativespace-cdp sudo[3344251]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 18 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:13 nativespace-cdp sudo[3344318]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 18 05:00:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:13 nativespace-cdp sudo[3344328]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 05:00:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 18 05:00:14 nativespace-cdp sudo[3344339]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 18 05:00:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 18 05:00:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:15 nativespace-cdp sudo[3344345]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 18 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:15 nativespace-cdp sudo[3344351]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 18 05:00:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:15 nativespace-cdp sudo[3344356]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 05:00:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:00:37 nativespace-cdp sudo[3344447]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:00:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 18 05:00:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:38 nativespace-cdp sudo[3344454]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 18 05:00:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:38 nativespace-cdp sudo[3344462]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 18 05:00:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:40 nativespace-cdp sudo[3344478]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 18 05:00:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:00:50 nativespace-cdp sudo[3344558]: pam_unix(sudo:session): session closed for user root
Sep 18 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:00:52 nativespace-cdp sudo[3344620]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 18 05:00:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 18 05:00:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 18 05:00:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:00:53 nativespace-cdp sudo[3344626]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 18 05:00:53 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 18 05:00:53 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 18 05:00:53 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:01:07 nativespace-cdp sudo[3344634]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 18 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:01:13 nativespace-cdp sudo[3344783]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:01:13 nativespace-cdp sudo[3344789]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 18 05:01:13 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 18 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 05:01:13 nativespace-cdp sudo[3344796]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 18 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:16 nativespace-cdp sudo[3344831]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 18 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:16 nativespace-cdp sudo[3344837]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:33 nativespace-cdp sshd[3344927]: Connection closed by 159.100.136.21 port 32876 [preauth]
Sep 18 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 18 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 18 05:01:44 nativespace-cdp sudo[3344957]: pam_unix(sudo:session): session closed for user fortunaz
Sep 18 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 18 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:45 nativespace-cdp sudo[3344964]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 18 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:45 nativespace-cdp sudo[3344969]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 18 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:45 nativespace-cdp sudo[3344973]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 18 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:48 nativespace-cdp sudo[3344988]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 18 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:48 nativespace-cdp sudo[3344994]: pam_unix(sudo:session): session closed for user root
Sep 18 05:01:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 18 05:01:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:01:52 nativespace-cdp sudo[3345058]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=nativene WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "MainWP Dashboard" on ONE | OAR (https://oneoar.co.uk). Installed version: 4.5.3.2. Available version: 5.2.1.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 18 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:04 nativespace-cdp sudo[3345257]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345380]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345385]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345388]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345391]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345394]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345397]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345400]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345403]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345406]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345410]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345413]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345416]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345419]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345422]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345425]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345428]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345431]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345434]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345437]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345441]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:12 nativespace-cdp sudo[3345444]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345447]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345450]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345453]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345456]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345460]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345463]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345467]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345470]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345473]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345476]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345479]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345482]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345485]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345488]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345491]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345494]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345497]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345500]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345503]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345506]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345509]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345512]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345515]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345518]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345521]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345524]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345527]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345530]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345533]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345537]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:13 nativespace-cdp sudo[3345540]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345543]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345546]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345549]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345552]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345555]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345558]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345561]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345565]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345568]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345571]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345574]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345577]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345580]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345583]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345586]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345589]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345592]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345595]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345598]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345601]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345604]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345607]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345610]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345613]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345616]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345619]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345622]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345625]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345628]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345632]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345635]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345638]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:14 nativespace-cdp sudo[3345642]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345645]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345648]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345651]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345654]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345657]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345660]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345663]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345666]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345669]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345672]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345675]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345678]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345681]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345684]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345687]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345690]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345693]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345696]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345699]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345702]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345705]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345708]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345711]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345714]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345717]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345720]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345723]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345726]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345729]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345732]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345735]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345738]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345742]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:15 nativespace-cdp sudo[3345745]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345748]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345751]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345754]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345757]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345760]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345763]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345766]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345769]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345772]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345775]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345778]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345781]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345784]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345787]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345790]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345793]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345796]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345799]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345802]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345805]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345808]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345811]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345814]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345817]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345820]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345823]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345826]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345829]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345832]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345835]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345838]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345842]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345845]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345848]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345851]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345854]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345858]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 18 05:02:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:16 nativespace-cdp sudo[3345861]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345864]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345867]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345870]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345873]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345876]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345879]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345882]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345885]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345888]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345891]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345894]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345897]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345900]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345903]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345906]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345909]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345912]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345916]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345919]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345922]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345925]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345928]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345931]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345934]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345937]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345940]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345943]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345946]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345949]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345952]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345955]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345958]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345962]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:17 nativespace-cdp sudo[3345965]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345968]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345971]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345974]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345977]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345980]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345983]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345986]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345989]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345992]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345995]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3345998]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346001]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346004]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346007]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346010]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346013]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346016]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346019]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346022]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346025]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346028]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346031]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346034]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346037]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346040]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346043]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346046]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346049]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346052]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346055]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346058]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346061]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346064]: pam_unix(sudo:session): session closed for user root
Sep 18 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 18 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:02:18 nativespace-cdp sudo[3346067]: pam_unix(sudo:session): session closed for user root
Sep 18 05:06:33 nativespace-cdp sshd[3347458]: Connection closed by 159.100.136.21 port 42560 [preauth]
Sep 18 05:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 05:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:18 nativespace-cdp sudo[3348012]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 05:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:18 nativespace-cdp sudo[3348016]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 05:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:19 nativespace-cdp sudo[3348019]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 05:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:19 nativespace-cdp sudo[3348025]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 05:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348028]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348040]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348044]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348047]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348050]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348053]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:22 nativespace-cdp sudo[3348056]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:24 nativespace-cdp sudo[3348065]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:24 nativespace-cdp sudo[3348070]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brighto1 user-2=nstriton user-3=firstre2 user-4=vivienn1 user-5=battlere user-6=oneoarco user-7=bedfords user-8=belle user-9=ggaaorgu user-10=newstoda user-11=bemadonn user-12=alexadmin user-13=skyfirec user-14=innovat1 user-15=askhform user-16=stuartge user-17=nativene user-18=jonhartl user-19=seftvta user-20=ultbcrra user-21=firstres user-22=coursemc user-23=opaiscyx user-24=firstrel user-25=clarkass user-26=costestimatorco user-27=firstred user-28=southlon user-29=highlegh user-30=gilpin user-31=milloyco user-32=elecleis user-33=hubmaster user-34=carsinyo user-35=fetch user-36=accooper user-37=ianrayne user-38=connectedshoppin user-39=thqkgnbz user-40=brmrjxl user-41=lakesan1 user-42=strathar user-43=sarafoundation user-44=atestord user-45=wilsonsw user-46=musorguk user-47=megacards
Sep 18 05:09:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=martsblo user-49=dickemery123 user-50=ptkxhsbt user-51=lbhyisi user-52=hhdugcor user-53=magichat user-54=markward user-55=foundation user-56=booff user-57=connect9 user-58=athenare user-59=vantagep user-60=maflemin user-61=lbscrmod user-62=ulsukarm user-63=jarvisin user-64=spectrum user-65=hodgesonweb user-66=theblack user-67=still user-68=agproduc user-69=stephani user-70=leereyn1 user-71=nove user-72=boldover user-73=bakery user-74=sosevalu user-75=crrtipdl user-76=oubpgvbx user-77=tstardom user-78=what user-79=cath user-80=sketchy user-81=havantho user-82=nvihkvu user-83=ladburyp user-84=dancinggardener user-85=stagingerris user-86=kategilpin user-87=design user-88=tomandle user-89=jennimil user-90=chrisdal user-91=mcdermos user-92=careers user-93=nbhavers user-94=david user-95=attlebor user-96=lucy user-97=onlycont user-98=outdoorc user-99=ranxterc user-100=hodgsonmail user-101=branko
Sep 18 05:09:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=romaldki user-103=nscdp user-104=health2045 user-105=fortunaz user-106=leftie user-107=foods user-108=lkpier user-109=philmcph user-110=ctedorgu user-111=steakbridieme user-112=donnychicago user-113=firstre5 user-114=smrszyqg user-115=isleofwi user-116=hidden user-117=nomistakes user-118=barbersh user-119=tigerlet user-120=cambria1 user-121=cathski user-122=reliable user-123=ninejimm user-124=howardon user-125=paulmca1 user-126=pugwash user-127=cwsocial user-128=hirefootballgame user-129=eugincou user-130=courseme user-131=sibtoncc user-132=asandcoc user-133=bwppodcast user-134=zebrapho user-135=steve user-136=burydropin user-137=fawcettd user-138=nsceres user-139=beauty user-140=eatspam user-141=darkstar user-142=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 05:09:24 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 05:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:25 nativespace-cdp sudo[3348075]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 05:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:25 nativespace-cdp sudo[3348082]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c3kr7Y8JLpqYbvO1.~
Sep 18 05:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:25 nativespace-cdp sudo[3348085]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c3kr7Y8JLpqYbvO1.~'
Sep 18 05:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:25 nativespace-cdp sudo[3348088]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c3kr7Y8JLpqYbvO1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 05:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:25 nativespace-cdp sudo[3348092]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 05:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:25 nativespace-cdp sudo[3348095]: pam_unix(sudo:session): session closed for user root
Sep 18 05:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 05:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 05:09:49 nativespace-cdp sudo[3348172]: pam_unix(sudo:session): session closed for user root
Sep 18 05:11:36 nativespace-cdp sshd[3348601]: Connection closed by 159.100.136.21 port 51158 [preauth]
Sep 18 05:16:33 nativespace-cdp sshd[3349608]: Connection closed by 159.100.136.21 port 60118 [preauth]
Sep 18 05:21:33 nativespace-cdp sshd[3351145]: Connection closed by 159.100.136.21 port 39866 [preauth]
Sep 18 05:26:35 nativespace-cdp sshd[3352249]: Connection closed by 159.100.136.21 port 48644 [preauth]
Sep 18 05:31:33 nativespace-cdp sshd[3353335]: Connection closed by 159.100.136.21 port 57164 [preauth]
Sep 18 05:35:10 nativespace-cdp su: pam_unix(su:session): session opened for user maflemin by (uid=0)
Sep 18 05:35:11 nativespace-cdp su[3354229]: pam_unix(su:session): session closed for user maflemin
Sep 18 05:36:33 nativespace-cdp sshd[3354573]: Connection closed by 159.100.136.21 port 38350 [preauth]
Sep 18 05:41:33 nativespace-cdp sshd[3355799]: Connection closed by 159.100.136.21 port 47296 [preauth]
Sep 18 05:46:33 nativespace-cdp sshd[3357277]: Connection closed by 159.100.136.21 port 55988 [preauth]
Sep 18 05:51:33 nativespace-cdp sshd[3359001]: Connection closed by 159.100.136.21 port 36892 [preauth]
Sep 18 05:56:37 nativespace-cdp sshd[3360049]: Connection closed by 159.100.136.21 port 45994 [preauth]
Sep 18 06:01:33 nativespace-cdp sshd[3361195]: Connection closed by 159.100.136.21 port 55080 [preauth]
Sep 18 06:06:33 nativespace-cdp sshd[3362882]: Connection closed by 159.100.136.21 port 35786 [preauth]
Sep 18 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:18 nativespace-cdp sudo[3363510]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:18 nativespace-cdp sudo[3363513]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:20 nativespace-cdp sudo[3363516]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 06:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:20 nativespace-cdp sudo[3363522]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 06:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:22 nativespace-cdp sudo[3363525]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:22 nativespace-cdp sudo[3363537]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:22 nativespace-cdp sudo[3363540]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:22 nativespace-cdp sudo[3363543]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:22 nativespace-cdp sudo[3363546]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:22 nativespace-cdp sudo[3363549]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 06:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:23 nativespace-cdp sudo[3363552]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:25 nativespace-cdp sudo[3363562]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:25 nativespace-cdp sudo[3363569]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=atestord user-2=sarafoundation user-3=strathar user-4=lakesan1 user-5=brmrjxl user-6=megacards user-7=musorguk user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=hhdugcor user-14=lbhyisi user-15=lbscrmod user-16=maflemin user-17=vantagep user-18=athenare user-19=connect9 user-20=markward user-21=foundation user-22=booff user-23=ulsukarm user-24=theblack user-25=hodgesonweb user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=agproduc user-31=still user-32=oneoarco user-33=battlere user-34=vivienn1 user-35=firstre2 user-36=nstriton user-37=brighto1 user-38=bemadonn user-39=newstoda user-40=ggaaorgu user-41=belle user-42=bedfords user-43=skyfirec user-44=alexadmin user-45=nativene user-46=askhform user-47=stuartge user-48=innovat1
Sep 18 06:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=firstres user-52=ultbcrra user-53=seftvta user-54=jonhartl user-55=highlegh user-56=southlon user-57=firstred user-58=costestimatorco user-59=firstrel user-60=clarkass user-61=fetch user-62=carsinyo user-63=hubmaster user-64=elecleis user-65=milloyco user-66=gilpin user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=steakbridieme user-72=donnychicago user-73=firstre5 user-74=ctedorgu user-75=philmcph user-76=lkpier user-77=leftie user-78=foods user-79=fortunaz user-80=health2045 user-81=nscdp user-82=barbersh user-83=tigerlet user-84=nomistakes user-85=hidden user-86=smrszyqg user-87=isleofwi user-88=cwsocial user-89=howardon user-90=paulmca1 user-91=pugwash user-92=ninejimm user-93=reliable user-94=cambria1 user-95=cathski user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 18 06:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=darkstar user-109=eatspam user-110=beauty user-111=boldover user-112=nove user-113=crrtipdl user-114=sosevalu user-115=bakery user-116=nvihkvu user-117=havantho user-118=sketchy user-119=cath user-120=what user-121=oubpgvbx user-122=tstardom user-123=design user-124=kategilpin user-125=stagingerris user-126=dancinggardener user-127=ladburyp user-128=jennimil user-129=tomandle user-130=david user-131=nbhavers user-132=careers user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=lucy user-137=attlebor user-138=romaldki user-139=branko user-140=outdoorc user-141=ranxterc user-142=hodgsonmail feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 06:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:26 nativespace-cdp sudo[3363574]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 06:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:27 nativespace-cdp sudo[3363581]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8MrYCSgFaTYVnXKz.~
Sep 18 06:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:27 nativespace-cdp sudo[3363584]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8MrYCSgFaTYVnXKz.~'
Sep 18 06:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:27 nativespace-cdp sudo[3363587]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8MrYCSgFaTYVnXKz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 06:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:27 nativespace-cdp sudo[3363591]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 06:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:27 nativespace-cdp sudo[3363594]: pam_unix(sudo:session): session closed for user root
Sep 18 06:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 06:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 06:09:29 nativespace-cdp sudo[3363613]: pam_unix(sudo:session): session closed for user root
Sep 18 06:11:33 nativespace-cdp sshd[3364055]: Connection closed by 159.100.136.21 port 45108 [preauth]
Sep 18 06:17:18 nativespace-cdp sshd[3365226]: Did not receive identification string from 159.100.136.21 port 54634
Sep 18 06:19:31 nativespace-cdp crond[3365387]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:19:31 nativespace-cdp crond[3365386]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:20:19 nativespace-cdp crond[3365483]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:20:19 nativespace-cdp crond[3365482]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:22:07 nativespace-cdp crond[3365609]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365612]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365614]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365613]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365605]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365620]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365607]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365599]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365600]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365604]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365608]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365603]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365602]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365616]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365618]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365610]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365619]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365606]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365615]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365617]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365601]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365611]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365705]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:32 nativespace-cdp crond[3365704]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:23:33 nativespace-cdp sshd[3365764]: Did not receive identification string from 159.100.136.21 port 35714
Sep 18 06:24:10 nativespace-cdp crond[3365798]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:24:10 nativespace-cdp crond[3365799]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:24:10 nativespace-cdp crond[3365874]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:24:10 nativespace-cdp crond[3365873]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 06:26:38 nativespace-cdp sshd[3366594]: Connection closed by 159.100.136.21 port 44746 [preauth]
Sep 18 06:31:35 nativespace-cdp sshd[3368339]: Connection closed by 159.100.136.21 port 53998 [preauth]
Sep 18 06:36:33 nativespace-cdp sshd[3369933]: Connection closed by 159.100.136.21 port 35378 [preauth]
Sep 18 06:41:33 nativespace-cdp sshd[3370930]: Connection closed by 159.100.136.21 port 44944 [preauth]
Sep 18 06:44:18 nativespace-cdp sshd[3371371]: Invalid user ubuntu from 118.45.205.44 port 38003
Sep 18 06:44:18 nativespace-cdp sshd[3371371]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 06:44:18 nativespace-cdp sshd[3371371]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:44:18 nativespace-cdp sshd[3371371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.45.205.44
Sep 18 06:44:19 nativespace-cdp sshd[3371378]: Invalid user ubuntu from 20.54.18.190 port 34890
Sep 18 06:44:19 nativespace-cdp sshd[3371378]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 06:44:19 nativespace-cdp sshd[3371378]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:44:19 nativespace-cdp sshd[3371378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.54.18.190
Sep 18 06:44:20 nativespace-cdp sshd[3371371]: Failed password for invalid user ubuntu from 118.45.205.44 port 38003 ssh2
Sep 18 06:44:21 nativespace-cdp sshd[3371371]: Received disconnect from 118.45.205.44 port 38003:11: Bye Bye [preauth]
Sep 18 06:44:21 nativespace-cdp sshd[3371371]: Disconnected from 118.45.205.44 port 38003 [preauth]
Sep 18 06:44:22 nativespace-cdp sshd[3371378]: Failed password for invalid user ubuntu from 20.54.18.190 port 34890 ssh2
Sep 18 06:44:22 nativespace-cdp sshd[3371378]: Received disconnect from 20.54.18.190 port 34890:11: Bye Bye [preauth]
Sep 18 06:44:22 nativespace-cdp sshd[3371378]: Disconnected from 20.54.18.190 port 34890 [preauth]
Sep 18 06:45:01 nativespace-cdp sshd[3371468]: Invalid user nexus from 182.93.50.90 port 39134
Sep 18 06:45:01 nativespace-cdp sshd[3371468]: input_userauth_request: invalid user nexus [preauth]
Sep 18 06:45:01 nativespace-cdp sshd[3371468]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:45:01 nativespace-cdp sshd[3371468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.50.90
Sep 18 06:45:02 nativespace-cdp sshd[3371468]: Failed password for invalid user nexus from 182.93.50.90 port 39134 ssh2
Sep 18 06:45:02 nativespace-cdp sshd[3371468]: Received disconnect from 182.93.50.90 port 39134:11: Bye Bye [preauth]
Sep 18 06:45:02 nativespace-cdp sshd[3371468]: Disconnected from 182.93.50.90 port 39134 [preauth]
Sep 18 06:46:36 nativespace-cdp sshd[3371986]: Connection closed by 159.100.136.21 port 54402 [preauth]
Sep 18 06:48:04 nativespace-cdp sshd[3372736]: Invalid user student from 172.174.72.225 port 44028
Sep 18 06:48:04 nativespace-cdp sshd[3372736]: input_userauth_request: invalid user student [preauth]
Sep 18 06:48:04 nativespace-cdp sshd[3372736]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:48:04 nativespace-cdp sshd[3372736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.72.225
Sep 18 06:48:06 nativespace-cdp sshd[3372736]: Failed password for invalid user student from 172.174.72.225 port 44028 ssh2
Sep 18 06:48:06 nativespace-cdp sshd[3372736]: Received disconnect from 172.174.72.225 port 44028:11: Bye Bye [preauth]
Sep 18 06:48:06 nativespace-cdp sshd[3372736]: Disconnected from 172.174.72.225 port 44028 [preauth]
Sep 18 06:48:32 nativespace-cdp sshd[3372797]: Invalid user admin from 220.133.132.240 port 59240
Sep 18 06:48:32 nativespace-cdp sshd[3372797]: input_userauth_request: invalid user admin [preauth]
Sep 18 06:48:32 nativespace-cdp sshd[3372797]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:48:32 nativespace-cdp sshd[3372797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.132.240
Sep 18 06:48:33 nativespace-cdp sshd[3372797]: Failed password for invalid user admin from 220.133.132.240 port 59240 ssh2
Sep 18 06:48:34 nativespace-cdp sshd[3372797]: Received disconnect from 220.133.132.240 port 59240:11: Bye Bye [preauth]
Sep 18 06:48:34 nativespace-cdp sshd[3372797]: Disconnected from 220.133.132.240 port 59240 [preauth]
Sep 18 06:49:40 nativespace-cdp sshd[3372957]: Invalid user vnc from 118.45.205.44 port 35335
Sep 18 06:49:40 nativespace-cdp sshd[3372957]: input_userauth_request: invalid user vnc [preauth]
Sep 18 06:49:40 nativespace-cdp sshd[3372957]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:49:40 nativespace-cdp sshd[3372957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.45.205.44
Sep 18 06:49:42 nativespace-cdp sshd[3372957]: Failed password for invalid user vnc from 118.45.205.44 port 35335 ssh2
Sep 18 06:49:44 nativespace-cdp sshd[3372957]: Received disconnect from 118.45.205.44 port 35335:11: Bye Bye [preauth]
Sep 18 06:49:44 nativespace-cdp sshd[3372957]: Disconnected from 118.45.205.44 port 35335 [preauth]
Sep 18 06:49:45 nativespace-cdp sshd[3372971]: Invalid user gitdaemon from 172.174.72.225 port 38572
Sep 18 06:49:45 nativespace-cdp sshd[3372971]: input_userauth_request: invalid user gitdaemon [preauth]
Sep 18 06:49:45 nativespace-cdp sshd[3372971]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:49:45 nativespace-cdp sshd[3372971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.72.225
Sep 18 06:49:46 nativespace-cdp sshd[3372971]: Failed password for invalid user gitdaemon from 172.174.72.225 port 38572 ssh2
Sep 18 06:49:46 nativespace-cdp sshd[3372971]: Received disconnect from 172.174.72.225 port 38572:11: Bye Bye [preauth]
Sep 18 06:49:46 nativespace-cdp sshd[3372971]: Disconnected from 172.174.72.225 port 38572 [preauth]
Sep 18 06:50:19 nativespace-cdp sshd[3373199]: Invalid user ali from 182.93.50.90 port 41370
Sep 18 06:50:19 nativespace-cdp sshd[3373199]: input_userauth_request: invalid user ali [preauth]
Sep 18 06:50:19 nativespace-cdp sshd[3373199]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:50:19 nativespace-cdp sshd[3373199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.50.90
Sep 18 06:50:21 nativespace-cdp sshd[3373199]: Failed password for invalid user ali from 182.93.50.90 port 41370 ssh2
Sep 18 06:50:21 nativespace-cdp sshd[3373199]: Received disconnect from 182.93.50.90 port 41370:11: Bye Bye [preauth]
Sep 18 06:50:21 nativespace-cdp sshd[3373199]: Disconnected from 182.93.50.90 port 41370 [preauth]
Sep 18 06:50:30 nativespace-cdp sshd[3373230]: Invalid user test01 from 172.174.72.225 port 53394
Sep 18 06:50:30 nativespace-cdp sshd[3373230]: input_userauth_request: invalid user test01 [preauth]
Sep 18 06:50:30 nativespace-cdp sshd[3373230]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:50:30 nativespace-cdp sshd[3373230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.72.225
Sep 18 06:50:31 nativespace-cdp sshd[3373232]: Invalid user monitor from 118.45.205.44 port 41707
Sep 18 06:50:31 nativespace-cdp sshd[3373232]: input_userauth_request: invalid user monitor [preauth]
Sep 18 06:50:31 nativespace-cdp sshd[3373232]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:50:31 nativespace-cdp sshd[3373232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.45.205.44
Sep 18 06:50:32 nativespace-cdp sshd[3373230]: Failed password for invalid user test01 from 172.174.72.225 port 53394 ssh2
Sep 18 06:50:32 nativespace-cdp sshd[3373230]: Received disconnect from 172.174.72.225 port 53394:11: Bye Bye [preauth]
Sep 18 06:50:32 nativespace-cdp sshd[3373230]: Disconnected from 172.174.72.225 port 53394 [preauth]
Sep 18 06:50:32 nativespace-cdp sshd[3373232]: Failed password for invalid user monitor from 118.45.205.44 port 41707 ssh2
Sep 18 06:51:33 nativespace-cdp sshd[3373579]: Connection closed by 159.100.136.21 port 35478 [preauth]
Sep 18 06:51:41 nativespace-cdp sshd[3373594]: Invalid user ubuntu from 20.54.18.190 port 43512
Sep 18 06:51:41 nativespace-cdp sshd[3373594]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 06:51:41 nativespace-cdp sshd[3373594]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:51:41 nativespace-cdp sshd[3373594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.54.18.190
Sep 18 06:51:42 nativespace-cdp sshd[3373594]: Failed password for invalid user ubuntu from 20.54.18.190 port 43512 ssh2
Sep 18 06:51:43 nativespace-cdp sshd[3373594]: Received disconnect from 20.54.18.190 port 43512:11: Bye Bye [preauth]
Sep 18 06:51:43 nativespace-cdp sshd[3373594]: Disconnected from 20.54.18.190 port 43512 [preauth]
Sep 18 06:52:43 nativespace-cdp sshd[3373738]: Invalid user test1 from 20.54.18.190 port 42474
Sep 18 06:52:43 nativespace-cdp sshd[3373738]: input_userauth_request: invalid user test1 [preauth]
Sep 18 06:52:43 nativespace-cdp sshd[3373738]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:52:43 nativespace-cdp sshd[3373738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.54.18.190
Sep 18 06:52:45 nativespace-cdp sshd[3373738]: Failed password for invalid user test1 from 20.54.18.190 port 42474 ssh2
Sep 18 06:52:47 nativespace-cdp sshd[3373738]: Received disconnect from 20.54.18.190 port 42474:11: Bye Bye [preauth]
Sep 18 06:52:47 nativespace-cdp sshd[3373738]: Disconnected from 20.54.18.190 port 42474 [preauth]
Sep 18 06:54:58 nativespace-cdp sshd[3374134]: Invalid user zookeeper from 115.91.91.182 port 34496
Sep 18 06:54:58 nativespace-cdp sshd[3374134]: input_userauth_request: invalid user zookeeper [preauth]
Sep 18 06:54:58 nativespace-cdp sshd[3374134]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:54:58 nativespace-cdp sshd[3374134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.91.91.182
Sep 18 06:55:00 nativespace-cdp sshd[3374134]: Failed password for invalid user zookeeper from 115.91.91.182 port 34496 ssh2
Sep 18 06:55:02 nativespace-cdp sshd[3374134]: Received disconnect from 115.91.91.182 port 34496:11: Bye Bye [preauth]
Sep 18 06:55:02 nativespace-cdp sshd[3374134]: Disconnected from 115.91.91.182 port 34496 [preauth]
Sep 18 06:55:58 nativespace-cdp sshd[3374366]: Invalid user wpadmin from 220.133.132.240 port 42178
Sep 18 06:55:58 nativespace-cdp sshd[3374366]: input_userauth_request: invalid user wpadmin [preauth]
Sep 18 06:55:58 nativespace-cdp sshd[3374366]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:55:58 nativespace-cdp sshd[3374366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.132.240
Sep 18 06:56:00 nativespace-cdp sshd[3374366]: Failed password for invalid user wpadmin from 220.133.132.240 port 42178 ssh2
Sep 18 06:56:01 nativespace-cdp sshd[3374366]: Received disconnect from 220.133.132.240 port 42178:11: Bye Bye [preauth]
Sep 18 06:56:01 nativespace-cdp sshd[3374366]: Disconnected from 220.133.132.240 port 42178 [preauth]
Sep 18 06:56:19 nativespace-cdp sshd[3374505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 18 06:56:19 nativespace-cdp sshd[3374505]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 18 06:56:21 nativespace-cdp sshd[3374505]: Failed password for root from 27.254.207.91 port 47601 ssh2
Sep 18 06:56:21 nativespace-cdp sshd[3374505]: Received disconnect from 27.254.207.91 port 47601:11: Bye Bye [preauth]
Sep 18 06:56:21 nativespace-cdp sshd[3374505]: Disconnected from 27.254.207.91 port 47601 [preauth]
Sep 18 06:56:33 nativespace-cdp sshd[3374640]: Connection closed by 159.100.136.21 port 44882 [preauth]
Sep 18 06:57:00 nativespace-cdp sshd[3374709]: Invalid user deployer from 178.216.215.122 port 38138
Sep 18 06:57:00 nativespace-cdp sshd[3374709]: input_userauth_request: invalid user deployer [preauth]
Sep 18 06:57:00 nativespace-cdp sshd[3374709]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:57:00 nativespace-cdp sshd[3374709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.216.215.122
Sep 18 06:57:03 nativespace-cdp sshd[3374709]: Failed password for invalid user deployer from 178.216.215.122 port 38138 ssh2
Sep 18 06:57:05 nativespace-cdp sshd[3374709]: Received disconnect from 178.216.215.122 port 38138:11: Bye Bye [preauth]
Sep 18 06:57:05 nativespace-cdp sshd[3374709]: Disconnected from 178.216.215.122 port 38138 [preauth]
Sep 18 06:57:27 nativespace-cdp sshd[3374786]: Invalid user odoo from 220.133.132.240 port 55260
Sep 18 06:57:27 nativespace-cdp sshd[3374786]: input_userauth_request: invalid user odoo [preauth]
Sep 18 06:57:27 nativespace-cdp sshd[3374786]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:57:27 nativespace-cdp sshd[3374786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.132.240
Sep 18 06:57:29 nativespace-cdp sshd[3374786]: Failed password for invalid user odoo from 220.133.132.240 port 55260 ssh2
Sep 18 06:57:59 nativespace-cdp sshd[3374906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.98.83  user=root
Sep 18 06:57:59 nativespace-cdp sshd[3374906]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 18 06:58:02 nativespace-cdp sshd[3374906]: Failed password for root from 64.225.98.83 port 47214 ssh2
Sep 18 06:58:02 nativespace-cdp sshd[3374906]: Received disconnect from 64.225.98.83 port 47214:11: Bye Bye [preauth]
Sep 18 06:58:02 nativespace-cdp sshd[3374906]: Disconnected from 64.225.98.83 port 47214 [preauth]
Sep 18 06:58:33 nativespace-cdp sshd[3375013]: Invalid user deploy from 182.93.50.90 port 38204
Sep 18 06:58:33 nativespace-cdp sshd[3375013]: input_userauth_request: invalid user deploy [preauth]
Sep 18 06:58:33 nativespace-cdp sshd[3375013]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 06:58:33 nativespace-cdp sshd[3375013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.50.90
Sep 18 06:58:34 nativespace-cdp sshd[3375013]: Failed password for invalid user deploy from 182.93.50.90 port 38204 ssh2
Sep 18 06:58:35 nativespace-cdp sshd[3375013]: Received disconnect from 182.93.50.90 port 38204:11: Bye Bye [preauth]
Sep 18 06:58:35 nativespace-cdp sshd[3375013]: Disconnected from 182.93.50.90 port 38204 [preauth]
Sep 18 07:00:44 nativespace-cdp sshd[3375649]: Invalid user test from 64.225.98.83 port 56950
Sep 18 07:00:44 nativespace-cdp sshd[3375649]: input_userauth_request: invalid user test [preauth]
Sep 18 07:00:44 nativespace-cdp sshd[3375649]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:00:44 nativespace-cdp sshd[3375649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.98.83
Sep 18 07:00:45 nativespace-cdp sshd[3375649]: Failed password for invalid user test from 64.225.98.83 port 56950 ssh2
Sep 18 07:00:45 nativespace-cdp sshd[3375649]: Received disconnect from 64.225.98.83 port 56950:11: Bye Bye [preauth]
Sep 18 07:00:45 nativespace-cdp sshd[3375649]: Disconnected from 64.225.98.83 port 56950 [preauth]
Sep 18 07:00:48 nativespace-cdp sshd[3375675]: Invalid user miner from 178.216.215.122 port 50162
Sep 18 07:00:48 nativespace-cdp sshd[3375675]: input_userauth_request: invalid user miner [preauth]
Sep 18 07:00:48 nativespace-cdp sshd[3375675]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:00:48 nativespace-cdp sshd[3375675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.216.215.122
Sep 18 07:00:51 nativespace-cdp sshd[3375675]: Failed password for invalid user miner from 178.216.215.122 port 50162 ssh2
Sep 18 07:00:53 nativespace-cdp sshd[3375675]: Received disconnect from 178.216.215.122 port 50162:11: Bye Bye [preauth]
Sep 18 07:00:53 nativespace-cdp sshd[3375675]: Disconnected from 178.216.215.122 port 50162 [preauth]
Sep 18 07:00:55 nativespace-cdp sshd[3375687]: Invalid user Admin1 from 115.91.91.182 port 33778
Sep 18 07:00:55 nativespace-cdp sshd[3375687]: input_userauth_request: invalid user Admin1 [preauth]
Sep 18 07:00:55 nativespace-cdp sshd[3375687]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:00:55 nativespace-cdp sshd[3375687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.91.91.182
Sep 18 07:00:58 nativespace-cdp sshd[3375687]: Failed password for invalid user Admin1 from 115.91.91.182 port 33778 ssh2
Sep 18 07:00:58 nativespace-cdp sshd[3375687]: Received disconnect from 115.91.91.182 port 33778:11: Bye Bye [preauth]
Sep 18 07:00:58 nativespace-cdp sshd[3375687]: Disconnected from 115.91.91.182 port 33778 [preauth]
Sep 18 07:01:14 nativespace-cdp sshd[3375776]: Invalid user vncuser from 27.254.207.91 port 1129
Sep 18 07:01:14 nativespace-cdp sshd[3375776]: input_userauth_request: invalid user vncuser [preauth]
Sep 18 07:01:14 nativespace-cdp sshd[3375776]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:01:14 nativespace-cdp sshd[3375776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 18 07:01:16 nativespace-cdp sshd[3375776]: Failed password for invalid user vncuser from 27.254.207.91 port 1129 ssh2
Sep 18 07:01:16 nativespace-cdp sshd[3375776]: Received disconnect from 27.254.207.91 port 1129:11: Bye Bye [preauth]
Sep 18 07:01:16 nativespace-cdp sshd[3375776]: Disconnected from 27.254.207.91 port 1129 [preauth]
Sep 18 07:01:32 nativespace-cdp sshd[3375945]: Invalid user ftpuser from 64.225.98.83 port 47792
Sep 18 07:01:32 nativespace-cdp sshd[3375945]: input_userauth_request: invalid user ftpuser [preauth]
Sep 18 07:01:32 nativespace-cdp sshd[3375945]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:01:32 nativespace-cdp sshd[3375945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.98.83
Sep 18 07:01:33 nativespace-cdp sshd[3375951]: Connection closed by 159.100.136.21 port 53172 [preauth]
Sep 18 07:01:34 nativespace-cdp sshd[3375945]: Failed password for invalid user ftpuser from 64.225.98.83 port 47792 ssh2
Sep 18 07:01:38 nativespace-cdp sshd[3375945]: Received disconnect from 64.225.98.83 port 47792:11: Bye Bye [preauth]
Sep 18 07:01:38 nativespace-cdp sshd[3375945]: Disconnected from 64.225.98.83 port 47792 [preauth]
Sep 18 07:01:41 nativespace-cdp sshd[3375993]: Invalid user ubuntu from 178.216.215.122 port 36860
Sep 18 07:01:41 nativespace-cdp sshd[3375993]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 07:01:41 nativespace-cdp sshd[3375993]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:01:41 nativespace-cdp sshd[3375993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.216.215.122
Sep 18 07:01:42 nativespace-cdp sshd[3375993]: Failed password for invalid user ubuntu from 178.216.215.122 port 36860 ssh2
Sep 18 07:01:43 nativespace-cdp sshd[3375993]: Received disconnect from 178.216.215.122 port 36860:11: Bye Bye [preauth]
Sep 18 07:01:43 nativespace-cdp sshd[3375993]: Disconnected from 178.216.215.122 port 36860 [preauth]
Sep 18 07:01:50 nativespace-cdp sshd[3376035]: Invalid user git from 115.91.91.182 port 46510
Sep 18 07:01:50 nativespace-cdp sshd[3376035]: input_userauth_request: invalid user git [preauth]
Sep 18 07:01:50 nativespace-cdp sshd[3376035]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:01:50 nativespace-cdp sshd[3376035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.91.91.182
Sep 18 07:01:52 nativespace-cdp sshd[3376035]: Failed password for invalid user git from 115.91.91.182 port 46510 ssh2
Sep 18 07:01:52 nativespace-cdp sshd[3376035]: Received disconnect from 115.91.91.182 port 46510:11: Bye Bye [preauth]
Sep 18 07:01:52 nativespace-cdp sshd[3376035]: Disconnected from 115.91.91.182 port 46510 [preauth]
Sep 18 07:02:01 nativespace-cdp sshd[3376101]: Invalid user alex from 27.254.207.91 port 52084
Sep 18 07:02:01 nativespace-cdp sshd[3376101]: input_userauth_request: invalid user alex [preauth]
Sep 18 07:02:01 nativespace-cdp sshd[3376101]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 07:02:01 nativespace-cdp sshd[3376101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 18 07:02:03 nativespace-cdp sshd[3376101]: Failed password for invalid user alex from 27.254.207.91 port 52084 ssh2
Sep 18 07:06:33 nativespace-cdp sshd[3377565]: Connection closed by 159.100.136.21 port 33836 [preauth]
Sep 18 07:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 07:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:36 nativespace-cdp sudo[3378062]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 07:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:36 nativespace-cdp sudo[3378065]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 07:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:37 nativespace-cdp sudo[3378072]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 07:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:37 nativespace-cdp sudo[3378081]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 07:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378087]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378106]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378111]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378115]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378120]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378125]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:41 nativespace-cdp sudo[3378131]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 07:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:43 nativespace-cdp sudo[3378145]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 07:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:44 nativespace-cdp sudo[3378152]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nomistakes user-2=hidden user-3=barbersh user-4=tigerlet user-5=isleofwi user-6=smrszyqg user-7=lkpier user-8=donnychicago user-9=firstre5 user-10=steakbridieme user-11=ctedorgu user-12=philmcph user-13=nscdp user-14=foods user-15=leftie user-16=fortunaz user-17=health2045 user-18=eugincou user-19=courseme user-20=hirefootballgame user-21=cwsocial user-22=pugwash user-23=howardon user-24=paulmca1 user-25=cathski user-26=cambria1 user-27=reliable user-28=ninejimm user-29=steve user-30=bwppodcast user-31=zebrapho user-32=asandcoc user-33=sibtoncc user-34=dhyana user-35=beauty user-36=darkstar user-37=eatspam user-38=nsceres user-39=fawcettd user-40=burydropin user-41=bakery user-42=crrtipdl user-43=sosevalu user-44=boldover user-45=nove user-46=design user-47=stagingerris user-48=dancinggardener
Sep 18 07:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ladburyp user-50=kategilpin user-51=havantho user-52=cath user-53=sketchy user-54=nvihkvu user-55=tstardom user-56=oubpgvbx user-57=what user-58=david user-59=nbhavers user-60=careers user-61=chrisdal user-62=mcdermos user-63=jennimil user-64=tomandle user-65=romaldki user-66=hodgsonmail user-67=outdoorc user-68=ranxterc user-69=branko user-70=onlycont user-71=lucy user-72=attlebor user-73=megacards user-74=musorguk user-75=wilsonsw user-76=strathar user-77=atestord user-78=sarafoundation user-79=brmrjxl user-80=lakesan1 user-81=magichat user-82=hhdugcor user-83=lbhyisi user-84=dickemery123 user-85=ptkxhsbt user-86=martsblo user-87=ulsukarm user-88=vantagep user-89=athenare user-90=connect9 user-91=lbscrmod user-92=maflemin user-93=foundation user-94=markward user-95=booff user-96=stephani user-97=leereyn1 user-98=agproduc user-99=still user-100=spectrum user-101=theblack user-102=hodgesonweb
Sep 18 07:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=jarvisin user-104=newstoda user-105=belle user-106=ggaaorgu user-107=bemadonn user-108=bedfords user-109=vivienn1 user-110=firstre2 user-111=oneoarco user-112=battlere user-113=nstriton user-114=brighto1 user-115=nativene user-116=innovat1 user-117=askhform user-118=stuartge user-119=alexadmin user-120=skyfirec user-121=firstred user-122=highlegh user-123=southlon user-124=firstrel user-125=clarkass user-126=costestimatorco user-127=coursemc user-128=opaiscyx user-129=ultbcrra user-130=seftvta user-131=jonhartl user-132=firstres user-133=connectedshoppin user-134=thqkgnbz user-135=accooper user-136=ianrayne user-137=hubmaster user-138=fetch user-139=carsinyo user-140=milloyco user-141=gilpin user-142=elecleis feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 07:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:45 nativespace-cdp sudo[3378161]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:46 nativespace-cdp sudo[3378169]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KRkNkwZlO2cJI6Ze.~
Sep 18 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:46 nativespace-cdp sudo[3378174]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KRkNkwZlO2cJI6Ze.~'
Sep 18 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:46 nativespace-cdp sudo[3378178]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KRkNkwZlO2cJI6Ze.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:46 nativespace-cdp sudo[3378184]: pam_unix(sudo:session): session closed for user root
Sep 18 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:09:46 nativespace-cdp sudo[3378189]: pam_unix(sudo:session): session closed for user root
Sep 18 07:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 07:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 07:10:05 nativespace-cdp sudo[3378376]: pam_unix(sudo:session): session closed for user root
Sep 18 07:11:33 nativespace-cdp sshd[3378626]: Connection closed by 159.100.136.21 port 43176 [preauth]
Sep 18 07:16:33 nativespace-cdp sshd[3379643]: Connection closed by 159.100.136.21 port 51866 [preauth]
Sep 18 07:21:33 nativespace-cdp sshd[3381202]: Connection closed by 159.100.136.21 port 60024 [preauth]
Sep 18 07:26:33 nativespace-cdp sshd[3382128]: Connection closed by 159.100.136.21 port 41004 [preauth]
Sep 18 07:31:33 nativespace-cdp sshd[3383165]: Connection closed by 159.100.136.21 port 49916 [preauth]
Sep 18 07:36:33 nativespace-cdp sshd[3384703]: Connection closed by 159.100.136.21 port 59524 [preauth]
Sep 18 07:41:34 nativespace-cdp sshd[3386090]: Connection closed by 159.100.136.21 port 40648 [preauth]
Sep 18 07:46:33 nativespace-cdp sshd[3387234]: Connection closed by 159.100.136.21 port 49626 [preauth]
Sep 18 07:51:34 nativespace-cdp sshd[3388440]: Connection closed by 159.100.136.21 port 58610 [preauth]
Sep 18 07:56:37 nativespace-cdp sshd[3389883]: Connection closed by 159.100.136.21 port 39794 [preauth]
Sep 18 08:01:33 nativespace-cdp sshd[3391141]: Connection closed by 159.100.136.21 port 48294 [preauth]
Sep 18 08:06:33 nativespace-cdp sshd[3393108]: Connection closed by 159.100.136.21 port 57814 [preauth]
Sep 18 08:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 08:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:30 nativespace-cdp sudo[3393703]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 08:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:30 nativespace-cdp sudo[3393707]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 08:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:31 nativespace-cdp sudo[3393712]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 08:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:31 nativespace-cdp sudo[3393721]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 08:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393728]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393740]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393745]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393749]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393754]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393759]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:33 nativespace-cdp sudo[3393765]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:42 nativespace-cdp sudo[3393792]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:42 nativespace-cdp sudo[3393798]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=clarkass user-2=firstrel user-3=costestimatorco user-4=firstred user-5=southlon user-6=highlegh user-7=seftvta user-8=jonhartl user-9=ultbcrra user-10=firstres user-11=coursemc user-12=opaiscyx user-13=accooper user-14=ianrayne user-15=connectedshoppin user-16=thqkgnbz user-17=milloyco user-18=gilpin user-19=elecleis user-20=hubmaster user-21=carsinyo user-22=fetch user-23=bedfords user-24=belle user-25=ggaaorgu user-26=newstoda user-27=bemadonn user-28=brighto1 user-29=nstriton user-30=firstre2 user-31=vivienn1 user-32=battlere user-33=oneoarco user-34=innovat1 user-35=stuartge user-36=askhform user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=markward user-42=foundation user-43=booff user-44=athenare user-45=connect9 user-46=vantagep user-47=maflemin user-48=lbscrmod
Sep 18 08:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=still user-50=agproduc user-51=stephani user-52=leereyn1 user-53=jarvisin user-54=spectrum user-55=theblack user-56=hodgesonweb user-57=wilsonsw user-58=musorguk user-59=megacards user-60=brmrjxl user-61=lakesan1 user-62=strathar user-63=sarafoundation user-64=atestord user-65=lbhyisi user-66=hhdugcor user-67=magichat user-68=martsblo user-69=dickemery123 user-70=ptkxhsbt user-71=chrisdal user-72=mcdermos user-73=careers user-74=nbhavers user-75=david user-76=tomandle user-77=jennimil user-78=ranxterc user-79=hodgsonmail user-80=outdoorc user-81=branko user-82=romaldki user-83=attlebor user-84=lucy user-85=onlycont user-86=bakery user-87=sosevalu user-88=crrtipdl user-89=nove user-90=boldover user-91=ladburyp user-92=stagingerris user-93=dancinggardener user-94=kategilpin user-95=design user-96=tstardom user-97=oubpgvbx user-98=what user-99=sketchy user-100=cath user-101=havantho user-102=nvihkvu
Sep 18 08:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=bwppodcast user-104=zebrapho user-105=steve user-106=sibtoncc user-107=asandcoc user-108=beauty user-109=eatspam user-110=darkstar user-111=dhyana user-112=burydropin user-113=fawcettd user-114=nsceres user-115=smrszyqg user-116=isleofwi user-117=hidden user-118=nomistakes user-119=barbersh user-120=tigerlet user-121=nscdp user-122=fortunaz user-123=health2045 user-124=leftie user-125=foods user-126=lkpier user-127=philmcph user-128=ctedorgu user-129=firstre5 user-130=donnychicago user-131=steakbridieme user-132=hirefootballgame user-133=eugincou user-134=courseme user-135=cathski user-136=cambria1 user-137=ninejimm user-138=reliable user-139=paulmca1 user-140=howardon user-141=pugwash user-142=cwsocial feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 08:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:43 nativespace-cdp sudo[3393805]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:43 nativespace-cdp sudo[3393816]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hAO8OesJkLRxjGQV.~
Sep 18 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:43 nativespace-cdp sudo[3393821]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hAO8OesJkLRxjGQV.~'
Sep 18 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:43 nativespace-cdp sudo[3393827]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hAO8OesJkLRxjGQV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:43 nativespace-cdp sudo[3393834]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:44 nativespace-cdp sudo[3393838]: pam_unix(sudo:session): session closed for user root
Sep 18 08:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 08:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 08:09:49 nativespace-cdp sudo[3393867]: pam_unix(sudo:session): session closed for user root
Sep 18 08:11:33 nativespace-cdp sshd[3394295]: Connection closed by 159.100.136.21 port 38504 [preauth]
Sep 18 08:16:33 nativespace-cdp sshd[3395425]: Connection closed by 159.100.136.21 port 47424 [preauth]
Sep 18 08:21:33 nativespace-cdp sshd[3396700]: Connection closed by 159.100.136.21 port 56904 [preauth]
Sep 18 08:26:33 nativespace-cdp sshd[3398096]: Connection closed by 159.100.136.21 port 38404 [preauth]
Sep 18 08:31:33 nativespace-cdp sshd[3399470]: Connection closed by 159.100.136.21 port 47804 [preauth]
Sep 18 08:36:35 nativespace-cdp sshd[3400693]: Connection closed by 159.100.136.21 port 57780 [preauth]
Sep 18 08:41:33 nativespace-cdp sshd[3402005]: Connection closed by 159.100.136.21 port 38664 [preauth]
Sep 18 08:46:33 nativespace-cdp sshd[3403248]: Connection closed by 159.100.136.21 port 47930 [preauth]
Sep 18 08:51:35 nativespace-cdp sshd[3405810]: Connection closed by 159.100.136.21 port 56692 [preauth]
Sep 18 08:54:26 nativespace-cdp sshd[3407608]: Invalid user magentodev from 83.84.182.56 port 33364
Sep 18 08:54:26 nativespace-cdp sshd[3407608]: input_userauth_request: invalid user magentodev [preauth]
Sep 18 08:54:27 nativespace-cdp sshd[3407608]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 08:54:27 nativespace-cdp sshd[3407608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.84.182.56
Sep 18 08:54:29 nativespace-cdp sshd[3407608]: Failed password for invalid user magentodev from 83.84.182.56 port 33364 ssh2
Sep 18 08:54:30 nativespace-cdp sshd[3407608]: Received disconnect from 83.84.182.56 port 33364:11: Bye Bye [preauth]
Sep 18 08:54:30 nativespace-cdp sshd[3407608]: Disconnected from 83.84.182.56 port 33364 [preauth]
Sep 18 08:56:33 nativespace-cdp sshd[3408457]: Connection closed by 159.100.136.21 port 37710 [preauth]
Sep 18 08:57:02 nativespace-cdp sshd[3408537]: Invalid user ubuntu from 179.32.33.161 port 35138
Sep 18 08:57:02 nativespace-cdp sshd[3408537]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 08:57:02 nativespace-cdp sshd[3408537]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 08:57:02 nativespace-cdp sshd[3408537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.32.33.161
Sep 18 08:57:04 nativespace-cdp sshd[3408537]: Failed password for invalid user ubuntu from 179.32.33.161 port 35138 ssh2
Sep 18 08:57:04 nativespace-cdp sshd[3408537]: Received disconnect from 179.32.33.161 port 35138:11: Bye Bye [preauth]
Sep 18 08:57:04 nativespace-cdp sshd[3408537]: Disconnected from 179.32.33.161 port 35138 [preauth]
Sep 18 08:59:43 nativespace-cdp sshd[3409430]: Invalid user reza from 222.253.45.177 port 59620
Sep 18 08:59:43 nativespace-cdp sshd[3409430]: input_userauth_request: invalid user reza [preauth]
Sep 18 08:59:43 nativespace-cdp sshd[3409430]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 08:59:43 nativespace-cdp sshd[3409430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.45.177
Sep 18 08:59:45 nativespace-cdp sshd[3409430]: Failed password for invalid user reza from 222.253.45.177 port 59620 ssh2
Sep 18 08:59:46 nativespace-cdp sshd[3409430]: Received disconnect from 222.253.45.177 port 59620:11: Bye Bye [preauth]
Sep 18 08:59:46 nativespace-cdp sshd[3409430]: Disconnected from 222.253.45.177 port 59620 [preauth]
Sep 18 09:00:19 nativespace-cdp sshd[3409684]: Received disconnect from 179.32.33.161 port 41204:11: Bye Bye [preauth]
Sep 18 09:00:19 nativespace-cdp sshd[3409684]: Disconnected from 179.32.33.161 port 41204 [preauth]
Sep 18 09:00:36 nativespace-cdp sshd[3409893]: Invalid user sammy from 52.187.9.8 port 44022
Sep 18 09:00:36 nativespace-cdp sshd[3409893]: input_userauth_request: invalid user sammy [preauth]
Sep 18 09:00:36 nativespace-cdp sshd[3409893]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:00:36 nativespace-cdp sshd[3409893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.9.8
Sep 18 09:00:38 nativespace-cdp sshd[3409893]: Failed password for invalid user sammy from 52.187.9.8 port 44022 ssh2
Sep 18 09:00:38 nativespace-cdp sshd[3409893]: Received disconnect from 52.187.9.8 port 44022:11: Bye Bye [preauth]
Sep 18 09:00:38 nativespace-cdp sshd[3409893]: Disconnected from 52.187.9.8 port 44022 [preauth]
Sep 18 09:00:45 nativespace-cdp sshd[3409917]: Invalid user ftpuser from 201.86.35.193 port 39246
Sep 18 09:00:45 nativespace-cdp sshd[3409917]: input_userauth_request: invalid user ftpuser [preauth]
Sep 18 09:00:45 nativespace-cdp sshd[3409917]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:00:45 nativespace-cdp sshd[3409917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.86.35.193
Sep 18 09:00:47 nativespace-cdp sshd[3409917]: Failed password for invalid user ftpuser from 201.86.35.193 port 39246 ssh2
Sep 18 09:00:47 nativespace-cdp sshd[3409917]: Received disconnect from 201.86.35.193 port 39246:11: Bye Bye [preauth]
Sep 18 09:00:47 nativespace-cdp sshd[3409917]: Disconnected from 201.86.35.193 port 39246 [preauth]
Sep 18 09:00:59 nativespace-cdp sshd[3410115]: Invalid user admin from 179.32.33.161 port 56150
Sep 18 09:00:59 nativespace-cdp sshd[3410115]: input_userauth_request: invalid user admin [preauth]
Sep 18 09:00:59 nativespace-cdp sshd[3410115]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:00:59 nativespace-cdp sshd[3410115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.32.33.161
Sep 18 09:01:01 nativespace-cdp sshd[3410115]: Failed password for invalid user admin from 179.32.33.161 port 56150 ssh2
Sep 18 09:01:04 nativespace-cdp sshd[3410125]: Invalid user server from 68.183.88.186 port 55158
Sep 18 09:01:04 nativespace-cdp sshd[3410125]: input_userauth_request: invalid user server [preauth]
Sep 18 09:01:04 nativespace-cdp sshd[3410125]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:01:04 nativespace-cdp sshd[3410125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.88.186
Sep 18 09:01:04 nativespace-cdp sshd[3410115]: Received disconnect from 179.32.33.161 port 56150:11: Bye Bye [preauth]
Sep 18 09:01:04 nativespace-cdp sshd[3410115]: Disconnected from 179.32.33.161 port 56150 [preauth]
Sep 18 09:01:05 nativespace-cdp sshd[3410125]: Failed password for invalid user server from 68.183.88.186 port 55158 ssh2
Sep 18 09:01:05 nativespace-cdp sshd[3410125]: Received disconnect from 68.183.88.186 port 55158:11: Bye Bye [preauth]
Sep 18 09:01:05 nativespace-cdp sshd[3410125]: Disconnected from 68.183.88.186 port 55158 [preauth]
Sep 18 09:01:34 nativespace-cdp sshd[3410244]: Connection closed by 159.100.136.21 port 46982 [preauth]
Sep 18 09:01:47 nativespace-cdp sshd[3410280]: Invalid user testing from 179.32.33.161 port 42880
Sep 18 09:01:47 nativespace-cdp sshd[3410280]: input_userauth_request: invalid user testing [preauth]
Sep 18 09:01:47 nativespace-cdp sshd[3410280]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:01:47 nativespace-cdp sshd[3410280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.32.33.161
Sep 18 09:01:49 nativespace-cdp sshd[3410280]: Failed password for invalid user testing from 179.32.33.161 port 42880 ssh2
Sep 18 09:01:49 nativespace-cdp sshd[3410280]: Received disconnect from 179.32.33.161 port 42880:11: Bye Bye [preauth]
Sep 18 09:01:49 nativespace-cdp sshd[3410280]: Disconnected from 179.32.33.161 port 42880 [preauth]
Sep 18 09:01:56 nativespace-cdp sshd[3410327]: Invalid user reza from 222.253.45.177 port 51672
Sep 18 09:01:56 nativespace-cdp sshd[3410327]: input_userauth_request: invalid user reza [preauth]
Sep 18 09:01:56 nativespace-cdp sshd[3410327]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:01:56 nativespace-cdp sshd[3410327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.45.177
Sep 18 09:01:58 nativespace-cdp sshd[3410327]: Failed password for invalid user reza from 222.253.45.177 port 51672 ssh2
Sep 18 09:01:58 nativespace-cdp sshd[3410327]: Received disconnect from 222.253.45.177 port 51672:11: Bye Bye [preauth]
Sep 18 09:01:58 nativespace-cdp sshd[3410327]: Disconnected from 222.253.45.177 port 51672 [preauth]
Sep 18 09:02:04 nativespace-cdp sshd[3410388]: Invalid user user1 from 68.183.88.186 port 41762
Sep 18 09:02:04 nativespace-cdp sshd[3410388]: input_userauth_request: invalid user user1 [preauth]
Sep 18 09:02:04 nativespace-cdp sshd[3410388]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:02:04 nativespace-cdp sshd[3410388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.88.186
Sep 18 09:02:05 nativespace-cdp sshd[3410396]: Invalid user sammy from 201.86.35.193 port 40534
Sep 18 09:02:05 nativespace-cdp sshd[3410396]: input_userauth_request: invalid user sammy [preauth]
Sep 18 09:02:05 nativespace-cdp sshd[3410396]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:02:05 nativespace-cdp sshd[3410396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.86.35.193
Sep 18 09:02:06 nativespace-cdp sshd[3410388]: Failed password for invalid user user1 from 68.183.88.186 port 41762 ssh2
Sep 18 09:02:06 nativespace-cdp sshd[3410388]: Received disconnect from 68.183.88.186 port 41762:11: Bye Bye [preauth]
Sep 18 09:02:06 nativespace-cdp sshd[3410388]: Disconnected from 68.183.88.186 port 41762 [preauth]
Sep 18 09:02:07 nativespace-cdp sshd[3410396]: Failed password for invalid user sammy from 201.86.35.193 port 40534 ssh2
Sep 18 09:02:08 nativespace-cdp sshd[3410396]: Received disconnect from 201.86.35.193 port 40534:11: Bye Bye [preauth]
Sep 18 09:02:08 nativespace-cdp sshd[3410396]: Disconnected from 201.86.35.193 port 40534 [preauth]
Sep 18 09:02:09 nativespace-cdp sshd[3410420]: Invalid user ali from 52.187.9.8 port 50804
Sep 18 09:02:09 nativespace-cdp sshd[3410420]: input_userauth_request: invalid user ali [preauth]
Sep 18 09:02:09 nativespace-cdp sshd[3410420]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:02:09 nativespace-cdp sshd[3410420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.9.8
Sep 18 09:02:11 nativespace-cdp sshd[3410420]: Failed password for invalid user ali from 52.187.9.8 port 50804 ssh2
Sep 18 09:02:11 nativespace-cdp sshd[3410420]: Received disconnect from 52.187.9.8 port 50804:11: Bye Bye [preauth]
Sep 18 09:02:11 nativespace-cdp sshd[3410420]: Disconnected from 52.187.9.8 port 50804 [preauth]
Sep 18 09:02:45 nativespace-cdp sshd[3410820]: Invalid user reza from 222.253.45.177 port 32974
Sep 18 09:02:45 nativespace-cdp sshd[3410820]: input_userauth_request: invalid user reza [preauth]
Sep 18 09:02:45 nativespace-cdp sshd[3410820]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:02:45 nativespace-cdp sshd[3410820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.45.177
Sep 18 09:02:47 nativespace-cdp sshd[3410820]: Failed password for invalid user reza from 222.253.45.177 port 32974 ssh2
Sep 18 09:02:47 nativespace-cdp sshd[3410820]: Received disconnect from 222.253.45.177 port 32974:11: Bye Bye [preauth]
Sep 18 09:02:47 nativespace-cdp sshd[3410820]: Disconnected from 222.253.45.177 port 32974 [preauth]
Sep 18 09:02:53 nativespace-cdp sshd[3411018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.88.186  user=root
Sep 18 09:02:53 nativespace-cdp sshd[3411018]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 18 09:02:54 nativespace-cdp sshd[3411018]: Failed password for root from 68.183.88.186 port 54306 ssh2
Sep 18 09:02:55 nativespace-cdp sshd[3411018]: Received disconnect from 68.183.88.186 port 54306:11: Bye Bye [preauth]
Sep 18 09:02:55 nativespace-cdp sshd[3411018]: Disconnected from 68.183.88.186 port 54306 [preauth]
Sep 18 09:02:55 nativespace-cdp sshd[3411061]: Invalid user admin from 52.187.9.8 port 49002
Sep 18 09:02:55 nativespace-cdp sshd[3411061]: input_userauth_request: invalid user admin [preauth]
Sep 18 09:02:55 nativespace-cdp sshd[3411061]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:02:55 nativespace-cdp sshd[3411061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.9.8
Sep 18 09:02:57 nativespace-cdp sshd[3411061]: Failed password for invalid user admin from 52.187.9.8 port 49002 ssh2
Sep 18 09:02:57 nativespace-cdp sshd[3411061]: Received disconnect from 52.187.9.8 port 49002:11: Bye Bye [preauth]
Sep 18 09:02:57 nativespace-cdp sshd[3411061]: Disconnected from 52.187.9.8 port 49002 [preauth]
Sep 18 09:02:58 nativespace-cdp sshd[3411109]: Invalid user git from 201.86.35.193 port 55232
Sep 18 09:02:58 nativespace-cdp sshd[3411109]: input_userauth_request: invalid user git [preauth]
Sep 18 09:02:58 nativespace-cdp sshd[3411109]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:02:58 nativespace-cdp sshd[3411109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.86.35.193
Sep 18 09:02:59 nativespace-cdp sshd[3411109]: Failed password for invalid user git from 201.86.35.193 port 55232 ssh2
Sep 18 09:03:02 nativespace-cdp sshd[3411109]: Received disconnect from 201.86.35.193 port 55232:11: Bye Bye [preauth]
Sep 18 09:03:02 nativespace-cdp sshd[3411109]: Disconnected from 201.86.35.193 port 55232 [preauth]
Sep 18 09:06:33 nativespace-cdp sshd[3412725]: Connection closed by 159.100.136.21 port 56782 [preauth]
Sep 18 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:35 nativespace-cdp sudo[3413456]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:35 nativespace-cdp sudo[3413466]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:36 nativespace-cdp sudo[3413471]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 09:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:36 nativespace-cdp sudo[3413478]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 09:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:37 nativespace-cdp sudo[3413484]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:38 nativespace-cdp sudo[3413501]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:38 nativespace-cdp sudo[3413511]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:38 nativespace-cdp sudo[3413516]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:38 nativespace-cdp sudo[3413522]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:38 nativespace-cdp sudo[3413528]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:38 nativespace-cdp sudo[3413533]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:43 nativespace-cdp sudo[3413559]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:44 nativespace-cdp sudo[3413565]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=accooper user-2=ianrayne user-3=connectedshoppin user-4=thqkgnbz user-5=milloyco user-6=gilpin user-7=elecleis user-8=hubmaster user-9=fetch user-10=carsinyo user-11=clarkass user-12=firstrel user-13=costestimatorco user-14=firstred user-15=highlegh user-16=southlon user-17=ultbcrra user-18=seftvta user-19=jonhartl user-20=firstres user-21=coursemc user-22=opaiscyx user-23=innovat1 user-24=askhform user-25=stuartge user-26=nativene user-27=alexadmin user-28=skyfirec user-29=bedfords user-30=newstoda user-31=belle user-32=ggaaorgu user-33=bemadonn user-34=nstriton user-35=brighto1 user-36=vivienn1 user-37=firstre2 user-38=oneoarco user-39=battlere user-40=agproduc user-41=still user-42=stephani user-43=leereyn1 user-44=jarvisin user-45=spectrum user-46=hodgesonweb user-47=theblack
Sep 18 09:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=booff user-50=markward user-51=foundation user-52=vantagep user-53=athenare user-54=connect9 user-55=lbscrmod user-56=maflemin user-57=hhdugcor user-58=lbhyisi user-59=magichat user-60=martsblo user-61=dickemery123 user-62=ptkxhsbt user-63=wilsonsw user-64=megacards user-65=musorguk user-66=brmrjxl user-67=lakesan1 user-68=strathar user-69=atestord user-70=sarafoundation user-71=hodgsonmail user-72=ranxterc user-73=outdoorc user-74=branko user-75=romaldki user-76=lucy user-77=attlebor user-78=onlycont user-79=chrisdal user-80=mcdermos user-81=david user-82=nbhavers user-83=careers user-84=tomandle user-85=jennimil user-86=stagingerris user-87=dancinggardener user-88=ladburyp user-89=kategilpin user-90=design user-91=oubpgvbx user-92=tstardom user-93=what user-94=havantho user-95=cath user-96=sketchy user-97=nvihkvu user-98=bakery user-99=crrtipdl user-100=sosevalu user-101=nove
Sep 18 09:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=beauty user-104=darkstar user-105=eatspam user-106=dhyana user-107=fawcettd user-108=burydropin user-109=nsceres user-110=bwppodcast user-111=zebrapho user-112=steve user-113=sibtoncc user-114=asandcoc user-115=hirefootballgame user-116=eugincou user-117=courseme user-118=cambria1 user-119=cathski user-120=ninejimm user-121=reliable user-122=cwsocial user-123=paulmca1 user-124=howardon user-125=pugwash user-126=isleofwi user-127=smrszyqg user-128=nomistakes user-129=hidden user-130=tigerlet user-131=barbersh user-132=nscdp user-133=leftie user-134=foods user-135=fortunaz user-136=health2045 user-137=lkpier user-138=firstre5 user-139=donnychicago user-140=steakbridieme user-141=ctedorgu user-142=philmcph feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 09:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:45 nativespace-cdp sudo[3413579]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:46 nativespace-cdp sudo[3413588]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TPVeOFkAM0npYDIR.~
Sep 18 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:46 nativespace-cdp sudo[3413594]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TPVeOFkAM0npYDIR.~'
Sep 18 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:46 nativespace-cdp sudo[3413598]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TPVeOFkAM0npYDIR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:46 nativespace-cdp sudo[3413604]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 09:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:46 nativespace-cdp sudo[3413609]: pam_unix(sudo:session): session closed for user root
Sep 18 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 09:09:53 nativespace-cdp sudo[3413643]: pam_unix(sudo:session): session closed for user root
Sep 18 09:11:33 nativespace-cdp sshd[3414124]: Connection closed by 159.100.136.21 port 37596 [preauth]
Sep 18 09:12:19 nativespace-cdp sshd[3414282]: Invalid user admin from 203.205.28.19 port 47414
Sep 18 09:12:19 nativespace-cdp sshd[3414282]: input_userauth_request: invalid user admin [preauth]
Sep 18 09:12:19 nativespace-cdp sshd[3414282]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 09:12:19 nativespace-cdp sshd[3414282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.205.28.19
Sep 18 09:12:21 nativespace-cdp sshd[3414282]: Failed password for invalid user admin from 203.205.28.19 port 47414 ssh2
Sep 18 09:12:21 nativespace-cdp sshd[3414282]: Received disconnect from 203.205.28.19 port 47414:11: Bye Bye [preauth]
Sep 18 09:12:21 nativespace-cdp sshd[3414282]: Disconnected from 203.205.28.19 port 47414 [preauth]
Sep 18 09:16:33 nativespace-cdp sshd[3415391]: Connection closed by 159.100.136.21 port 46936 [preauth]
Sep 18 09:26:35 nativespace-cdp sshd[3418255]: Connection closed by 159.100.136.21 port 36988 [preauth]
Sep 18 09:31:33 nativespace-cdp sshd[3419869]: Connection closed by 159.100.136.21 port 46544 [preauth]
Sep 18 09:36:33 nativespace-cdp sshd[3421749]: Connection closed by 159.100.136.21 port 55914 [preauth]
Sep 18 09:41:33 nativespace-cdp sshd[3423121]: Connection closed by 159.100.136.21 port 36640 [preauth]
Sep 18 09:46:33 nativespace-cdp sshd[3424456]: Connection closed by 159.100.136.21 port 46148 [preauth]
Sep 18 09:51:33 nativespace-cdp sshd[3426317]: Connection closed by 159.100.136.21 port 54032 [preauth]
Sep 18 09:53:58 nativespace-cdp sshd[3426867]: Did not receive identification string from 199.45.155.90 port 60250
Sep 18 09:54:19 nativespace-cdp sshd[3426900]: Connection closed by 199.45.155.90 port 60346 [preauth]
Sep 18 09:56:35 nativespace-cdp sshd[3427627]: Connection closed by 159.100.136.21 port 34274 [preauth]
Sep 18 10:01:33 nativespace-cdp sshd[3428995]: Connection closed by 159.100.136.21 port 42890 [preauth]
Sep 18 10:06:34 nativespace-cdp sshd[3430452]: Connection closed by 159.100.136.21 port 52570 [preauth]
Sep 18 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:36 nativespace-cdp sudo[3431452]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:36 nativespace-cdp sudo[3431458]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 10:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:39 nativespace-cdp sudo[3431463]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:39 nativespace-cdp sudo[3431573]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431579]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431705]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431710]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431714]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431719]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431726]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 10:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:43 nativespace-cdp sudo[3431732]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 10:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:45 nativespace-cdp sudo[3431755]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 10:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:46 nativespace-cdp sudo[3431762]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=coursemc user-2=opaiscyx user-3=firstres user-4=ultbcrra user-5=seftvta user-6=jonhartl user-7=highlegh user-8=southlon user-9=firstred user-10=costestimatorco user-11=firstrel user-12=clarkass user-13=fetch user-14=carsinyo user-15=hubmaster user-16=elecleis user-17=gilpin user-18=milloyco user-19=thqkgnbz user-20=connectedshoppin user-21=ianrayne user-22=accooper user-23=oneoarco user-24=battlere user-25=vivienn1 user-26=firstre2 user-27=nstriton user-28=brighto1 user-29=bemadonn user-30=newstoda user-31=ggaaorgu user-32=belle user-33=bedfords user-34=alexadmin user-35=skyfirec user-36=nativene user-37=stuartge user-38=askhform user-39=innovat1 user-40=lbscrmod user-41=maflemin user-42=vantagep user-43=connect9 user-44=athenare user-45=booff user-46=markward user-47=foundation user-48=ulsukarm
Sep 18 10:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=theblack user-50=hodgesonweb user-51=spectrum user-52=jarvisin user-53=leereyn1 user-54=stephani user-55=agproduc user-56=still user-57=atestord user-58=sarafoundation user-59=strathar user-60=lakesan1 user-61=brmrjxl user-62=megacards user-63=musorguk user-64=wilsonsw user-65=ptkxhsbt user-66=dickemery123 user-67=martsblo user-68=magichat user-69=hhdugcor user-70=lbhyisi user-71=jennimil user-72=tomandle user-73=david user-74=careers user-75=nbhavers user-76=mcdermos user-77=chrisdal user-78=onlycont user-79=lucy user-80=attlebor user-81=romaldki user-82=branko user-83=outdoorc user-84=hodgsonmail user-85=ranxterc user-86=boldover user-87=nove user-88=crrtipdl user-89=sosevalu user-90=bakery user-91=nvihkvu user-92=havantho user-93=sketchy user-94=cath user-95=what user-96=tstardom user-97=oubpgvbx user-98=design user-99=kategilpin user-100=dancinggardener user-101=stagingerris user-102=ladburyp
Sep 18 10:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=steve user-106=zebrapho user-107=bwppodcast user-108=nsceres user-109=fawcettd user-110=burydropin user-111=dhyana user-112=darkstar user-113=eatspam user-114=beauty user-115=steakbridieme user-116=donnychicago user-117=firstre5 user-118=philmcph user-119=ctedorgu user-120=lkpier user-121=foods user-122=leftie user-123=health2045 user-124=fortunaz user-125=nscdp user-126=barbersh user-127=tigerlet user-128=nomistakes user-129=hidden user-130=smrszyqg user-131=isleofwi user-132=cwsocial user-133=paulmca1 user-134=howardon user-135=pugwash user-136=reliable user-137=ninejimm user-138=cathski user-139=cambria1 user-140=courseme user-141=eugincou user-142=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 10:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 10:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:48 nativespace-cdp sudo[3431769]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 10:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:48 nativespace-cdp sudo[3431777]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JwgRkOYrIzZ0LlJc.~
Sep 18 10:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:48 nativespace-cdp sudo[3431782]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JwgRkOYrIzZ0LlJc.~'
Sep 18 10:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:48 nativespace-cdp sudo[3431786]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JwgRkOYrIzZ0LlJc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 10:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:48 nativespace-cdp sudo[3431792]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 10:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:49 nativespace-cdp sudo[3431798]: pam_unix(sudo:session): session closed for user root
Sep 18 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 10:09:51 nativespace-cdp sudo[3431847]: pam_unix(sudo:session): session closed for user root
Sep 18 10:11:35 nativespace-cdp sshd[3432394]: Connection closed by 159.100.136.21 port 33336 [preauth]
Sep 18 10:16:35 nativespace-cdp sshd[3433373]: Connection closed by 159.100.136.21 port 42588 [preauth]
Sep 18 10:21:35 nativespace-cdp sshd[3435177]: Connection closed by 159.100.136.21 port 51750 [preauth]
Sep 18 10:26:35 nativespace-cdp sshd[3436310]: Connection closed by 159.100.136.21 port 33022 [preauth]
Sep 18 10:31:33 nativespace-cdp sshd[3437643]: Connection closed by 159.100.136.21 port 41394 [preauth]
Sep 18 10:36:33 nativespace-cdp sshd[3439021]: Connection closed by 159.100.136.21 port 50748 [preauth]
Sep 18 10:41:33 nativespace-cdp sshd[3440393]: Connection closed by 159.100.136.21 port 60078 [preauth]
Sep 18 10:46:33 nativespace-cdp sshd[3441648]: Connection closed by 159.100.136.21 port 40348 [preauth]
Sep 18 10:51:36 nativespace-cdp sshd[3443629]: Connection closed by 159.100.136.21 port 48778 [preauth]
Sep 18 10:56:33 nativespace-cdp sshd[3444810]: Connection closed by 159.100.136.21 port 58378 [preauth]
Sep 18 11:01:34 nativespace-cdp sshd[3446128]: Connection closed by 159.100.136.21 port 39266 [preauth]
Sep 18 11:06:28 nativespace-cdp sshd[3447438]: Accepted publickey for root from 185.67.178.249 port 57620 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 18 11:06:28 nativespace-cdp sshd[3447438]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 18 11:06:39 nativespace-cdp sshd[3447519]: Connection closed by 159.100.136.21 port 49114 [preauth]
Sep 18 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:03 nativespace-cdp sudo[3456970]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:03 nativespace-cdp sudo[3456981]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:04 nativespace-cdp sudo[3456985]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:04 nativespace-cdp sudo[3457016]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457023]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457230]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457237]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457242]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457246]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457251]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:11 nativespace-cdp sudo[3457260]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 11:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:14 nativespace-cdp sudo[3457379]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:15 nativespace-cdp sudo[3457404]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=oubpgvbx user-2=tstardom user-3=what user-4=cath user-5=sketchy user-6=havantho user-7=nvihkvu user-8=ladburyp user-9=dancinggardener user-10=stagingerris user-11=kategilpin user-12=design user-13=nove user-14=boldover user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=attlebor user-19=lucy user-20=onlycont user-21=ranxterc user-22=hodgsonmail user-23=outdoorc user-24=branko user-25=romaldki user-26=tomandle user-27=jennimil user-28=chrisdal user-29=mcdermos user-30=nbhavers user-31=careers user-32=david user-33=cathski user-34=cambria1 user-35=ninejimm user-36=reliable user-37=howardon user-38=pugwash user-39=paulmca1 user-40=cwsocial user-41=hirefootballgame user-42=eugincou user-43=courseme user-44=nscdp user-45=fortunaz user-46=health2045 user-47=foods user-48=leftie user-49=lkpier
Sep 18 11:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=philmcph user-51=ctedorgu user-52=donnychicago user-53=steakbridieme user-54=firstre5 user-55=smrszyqg user-56=isleofwi user-57=hidden user-58=nomistakes user-59=barbersh user-60=tigerlet user-61=burydropin user-62=fawcettd user-63=nsceres user-64=beauty user-65=eatspam user-66=darkstar user-67=dhyana user-68=asandcoc user-69=sibtoncc user-70=bwppodcast user-71=zebrapho user-72=steve user-73=skyfirec user-74=alexadmin user-75=innovat1 user-76=stuartge user-77=askhform user-78=nativene user-79=brighto1 user-80=nstriton user-81=firstre2 user-82=vivienn1 user-83=battlere user-84=oneoarco user-85=bedfords user-86=ggaaorgu user-87=belle user-88=newstoda user-89=bemadonn user-90=milloyco user-91=gilpin user-92=elecleis user-93=hubmaster user-94=carsinyo user-95=fetch user-96=accooper user-97=ianrayne user-98=connectedshoppin user-99=thqkgnbz user-100=seftvta user-101=jonhartl user-102=ultbcrra user-103=firstres
Sep 18 11:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=coursemc user-105=opaiscyx user-106=clarkass user-107=firstrel user-108=costestimatorco user-109=firstred user-110=southlon user-111=highlegh user-112=martsblo user-113=dickemery123 user-114=ptkxhsbt user-115=lbhyisi user-116=hhdugcor user-117=magichat user-118=brmrjxl user-119=lakesan1 user-120=strathar user-121=sarafoundation user-122=atestord user-123=wilsonsw user-124=musorguk user-125=megacards user-126=jarvisin user-127=spectrum user-128=theblack user-129=hodgesonweb user-130=still user-131=agproduc user-132=stephani user-133=leereyn1 user-134=foundation user-135=markward user-136=booff user-137=connect9 user-138=athenare user-139=vantagep user-140=maflemin user-141=lbscrmod user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 11:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:17 nativespace-cdp sudo[3457427]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 18 11:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:19 nativespace-cdp sudo[3457560]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 18 11:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 18 11:10:19 nativespace-cdp sudo[3457599]: pam_unix(sudo:session): session closed for user onlycont
Sep 18 11:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 18 11:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:20 nativespace-cdp sudo[3457632]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 18 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 11:10:20 nativespace-cdp sudo[3457672]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 11:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 18 11:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:23 nativespace-cdp sudo[3457796]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 18 11:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 18 11:10:23 nativespace-cdp sudo[3457835]: pam_unix(sudo:session): session closed for user lkpier
Sep 18 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 18 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:25 nativespace-cdp sudo[3457873]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 18 11:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 18 11:10:25 nativespace-cdp sudo[3457911]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 18 11:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 18 11:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 18 11:10:25 nativespace-cdp sudo[3457937]: pam_unix(sudo:session): session closed for user oneoarco
Sep 18 11:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 18 11:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:26 nativespace-cdp sudo[3457959]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 18 11:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 18 11:10:26 nativespace-cdp sudo[3457992]: pam_unix(sudo:session): session closed for user fortunaz
Sep 18 11:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 18 11:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:26 nativespace-cdp sudo[3458012]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 11:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:26 nativespace-cdp sudo[3458017]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 18 11:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:47 nativespace-cdp sudo[3459700]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 18 11:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:47 nativespace-cdp sudo[3459712]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 11:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:54 nativespace-cdp sudo[3460006]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZzVPLBe7BtCuSyW4.~
Sep 18 11:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:54 nativespace-cdp sudo[3460014]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZzVPLBe7BtCuSyW4.~'
Sep 18 11:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:54 nativespace-cdp sudo[3460019]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZzVPLBe7BtCuSyW4.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 11:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:54 nativespace-cdp sudo[3460024]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 11:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:54 nativespace-cdp sudo[3460028]: pam_unix(sudo:session): session closed for user root
Sep 18 11:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 11:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 11:10:57 nativespace-cdp sudo[3460115]: pam_unix(sudo:session): session closed for user root
Sep 18 11:11:36 nativespace-cdp sshd[3461877]: Connection closed by 159.100.136.21 port 58570 [preauth]
Sep 18 11:16:33 nativespace-cdp sshd[3472304]: Connection closed by 159.100.136.21 port 40064 [preauth]
Sep 18 11:26:35 nativespace-cdp sshd[3481353]: Connection closed by 159.100.136.21 port 58310 [preauth]
Sep 18 11:31:35 nativespace-cdp sshd[3482695]: Connection closed by 159.100.136.21 port 39448 [preauth]
Sep 18 11:36:33 nativespace-cdp sshd[3484285]: Connection closed by 159.100.136.21 port 49084 [preauth]
Sep 18 11:41:35 nativespace-cdp sshd[3485747]: Connection closed by 159.100.136.21 port 58328 [preauth]
Sep 18 11:46:38 nativespace-cdp sshd[3487081]: Connection closed by 159.100.136.21 port 39246 [preauth]
Sep 18 11:51:35 nativespace-cdp sshd[3488999]: Connection closed by 159.100.136.21 port 47688 [preauth]
Sep 18 11:56:33 nativespace-cdp sshd[3490182]: Connection closed by 159.100.136.21 port 55452 [preauth]
Sep 18 11:59:30 nativespace-cdp sshd[3447438]: Received disconnect from 185.67.178.249 port 57620:11: Normal Shutdown
Sep 18 11:59:30 nativespace-cdp sshd[3447438]: Disconnected from 185.67.178.249 port 57620
Sep 18 11:59:30 nativespace-cdp sshd[3447438]: pam_unix(sshd:session): session closed for user root
Sep 18 12:01:34 nativespace-cdp sshd[3491336]: Connection closed by 159.100.136.21 port 36328 [preauth]
Sep 18 12:06:33 nativespace-cdp sshd[3492651]: Connection closed by 159.100.136.21 port 44320 [preauth]
Sep 18 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:00 nativespace-cdp sudo[3493796]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:00 nativespace-cdp sudo[3493800]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:01 nativespace-cdp sudo[3493805]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 12:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:01 nativespace-cdp sudo[3493900]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 12:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493903]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493948]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493951]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493956]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493959]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493962]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:05 nativespace-cdp sudo[3493965]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 12:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:07 nativespace-cdp sudo[3493976]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 12:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:08 nativespace-cdp sudo[3493981]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=coursemc user-2=opaiscyx user-3=firstres user-4=jonhartl user-5=seftvta user-6=ultbcrra user-7=southlon user-8=highlegh user-9=firstred user-10=costestimatorco user-11=firstrel user-12=clarkass user-13=carsinyo user-14=fetch user-15=hubmaster user-16=elecleis user-17=milloyco user-18=gilpin user-19=thqkgnbz user-20=connectedshoppin user-21=ianrayne user-22=accooper user-23=battlere user-24=oneoarco user-25=firstre2 user-26=vivienn1 user-27=brighto1 user-28=nstriton user-29=bemadonn user-30=ggaaorgu user-31=belle user-32=newstoda user-33=bedfords user-34=skyfirec user-35=alexadmin user-36=nativene user-37=askhform user-38=stuartge user-39=innovat1 user-40=maflemin user-41=lbscrmod user-42=athenare user-43=connect9 user-44=vantagep user-45=booff user-46=markward user-47=foundation user-48=ulsukarm
Sep 18 12:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hodgesonweb user-50=theblack user-51=spectrum user-52=jarvisin user-53=leereyn1 user-54=stephani user-55=still user-56=agproduc user-57=sarafoundation user-58=atestord user-59=strathar user-60=brmrjxl user-61=lakesan1 user-62=musorguk user-63=megacards user-64=wilsonsw user-65=ptkxhsbt user-66=dickemery123 user-67=martsblo user-68=magichat user-69=lbhyisi user-70=hhdugcor user-71=jennimil user-72=tomandle user-73=nbhavers user-74=careers user-75=david user-76=mcdermos user-77=chrisdal user-78=onlycont user-79=attlebor user-80=lucy user-81=romaldki user-82=branko user-83=hodgsonmail user-84=ranxterc user-85=outdoorc user-86=boldover user-87=nove user-88=sosevalu user-89=crrtipdl user-90=bakery user-91=nvihkvu user-92=sketchy user-93=cath user-94=havantho user-95=what user-96=tstardom user-97=oubpgvbx user-98=design user-99=kategilpin user-100=ladburyp user-101=stagingerris user-102=dancinggardener
Sep 18 12:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=steve user-106=zebrapho user-107=bwppodcast user-108=nsceres user-109=burydropin user-110=fawcettd user-111=dhyana user-112=eatspam user-113=darkstar user-114=beauty user-115=philmcph user-116=ctedorgu user-117=donnychicago user-118=firstre5 user-119=steakbridieme user-120=lkpier user-121=fortunaz user-122=health2045 user-123=foods user-124=leftie user-125=nscdp user-126=barbersh user-127=tigerlet user-128=hidden user-129=nomistakes user-130=smrszyqg user-131=isleofwi user-132=pugwash user-133=howardon user-134=paulmca1 user-135=cwsocial user-136=ninejimm user-137=reliable user-138=cathski user-139=cambria1 user-140=courseme user-141=eugincou user-142=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 12:10:08 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 12:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:09 nativespace-cdp sudo[3493987]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 12:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:11 nativespace-cdp sudo[3493994]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HTq5Hi3PeWGyGiWL.~
Sep 18 12:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:11 nativespace-cdp sudo[3493998]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HTq5Hi3PeWGyGiWL.~'
Sep 18 12:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:11 nativespace-cdp sudo[3494001]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HTq5Hi3PeWGyGiWL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 12:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:11 nativespace-cdp sudo[3494006]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 12:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:11 nativespace-cdp sudo[3494009]: pam_unix(sudo:session): session closed for user root
Sep 18 12:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 12:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 12:10:13 nativespace-cdp sudo[3494031]: pam_unix(sudo:session): session closed for user root
Sep 18 12:11:36 nativespace-cdp sshd[3494311]: Connection closed by 159.100.136.21 port 52814 [preauth]
Sep 18 12:16:33 nativespace-cdp sshd[3495396]: Connection closed by 159.100.136.21 port 33396 [preauth]
Sep 18 12:21:33 nativespace-cdp sshd[3497053]: Connection closed by 159.100.136.21 port 41940 [preauth]
Sep 18 12:26:33 nativespace-cdp sshd[3498383]: Connection closed by 159.100.136.21 port 51120 [preauth]
Sep 18 12:31:33 nativespace-cdp sshd[3499693]: Connection closed by 159.100.136.21 port 59970 [preauth]
Sep 18 12:36:33 nativespace-cdp sshd[3501089]: Connection closed by 159.100.136.21 port 41284 [preauth]
Sep 18 12:41:34 nativespace-cdp sshd[3502588]: Connection closed by 159.100.136.21 port 50784 [preauth]
Sep 18 12:46:36 nativespace-cdp sshd[3503769]: Connection closed by 159.100.136.21 port 60086 [preauth]
Sep 18 12:51:36 nativespace-cdp sshd[3505468]: Connection closed by 159.100.136.21 port 40928 [preauth]
Sep 18 12:56:33 nativespace-cdp sshd[3506584]: Connection closed by 159.100.136.21 port 49976 [preauth]
Sep 18 13:01:33 nativespace-cdp sshd[3507827]: Connection closed by 159.100.136.21 port 59092 [preauth]
Sep 18 13:09:00 nativespace-cdp crond[3509720]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 13:09:03 nativespace-cdp crond[3509721]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 18 13:09:05 nativespace-cdp sshd[3509756]: Did not receive identification string from 159.100.136.21 port 39836
Sep 18 13:10:52 nativespace-cdp sshd[3511325]: Accepted publickey for root from 185.67.178.249 port 55312 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 18 13:10:57 nativespace-cdp sshd[3511325]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 18 13:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 13:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:11:18 nativespace-cdp sudo[3511593]: pam_unix(sudo:session): session closed for user root
Sep 18 13:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 13:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:11:18 nativespace-cdp sudo[3511599]: pam_unix(sudo:session): session closed for user root
Sep 18 13:11:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 13:11:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:11:30 nativespace-cdp sudo[3511602]: pam_unix(sudo:session): session closed for user root
Sep 18 13:11:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 13:11:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:11:30 nativespace-cdp sudo[3511657]: pam_unix(sudo:session): session closed for user root
Sep 18 13:11:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 13:11:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:11:33 nativespace-cdp sshd[3511714]: Connection closed by 159.100.136.21 port 48774 [preauth]
Sep 18 13:12:01 nativespace-cdp sudo[3511673]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 13:12:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:01 nativespace-cdp sudo[3511867]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 13:12:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:01 nativespace-cdp sudo[3511870]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 13:12:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:01 nativespace-cdp sudo[3511873]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 13:12:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:01 nativespace-cdp sudo[3511876]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 13:12:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:01 nativespace-cdp sudo[3511879]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 13:12:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:02 nativespace-cdp sudo[3511883]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 13:12:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:05 nativespace-cdp sudo[3511905]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 13:12:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:07 nativespace-cdp sudo[3511910]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=leereyn1 user-2=stephani user-3=still user-4=agproduc user-5=theblack user-6=hodgesonweb user-7=spectrum user-8=jarvisin user-9=ulsukarm user-10=maflemin user-11=lbscrmod user-12=athenare user-13=connect9 user-14=vantagep user-15=booff user-16=markward user-17=foundation user-18=magichat user-19=lbhyisi user-20=hhdugcor user-21=ptkxhsbt user-22=dickemery123 user-23=martsblo user-24=musorguk user-25=megacards user-26=wilsonsw user-27=sarafoundation user-28=atestord user-29=strathar user-30=lakesan1 user-31=brmrjxl user-32=thqkgnbz user-33=connectedshoppin user-34=ianrayne user-35=accooper user-36=carsinyo user-37=fetch user-38=hubmaster user-39=elecleis user-40=gilpin user-41=milloyco user-42=southlon user-43=highlegh user-44=firstred user-45=costestimatorco user-46=clarkass user-47=firstrel
Sep 18 13:12:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=coursemc user-50=firstres user-51=seftvta user-52=jonhartl user-53=ultbcrra user-54=nativene user-55=askhform user-56=stuartge user-57=innovat1 user-58=alexadmin user-59=skyfirec user-60=bemadonn user-61=belle user-62=ggaaorgu user-63=newstoda user-64=bedfords user-65=battlere user-66=oneoarco user-67=firstre2 user-68=vivienn1 user-69=brighto1 user-70=nstriton user-71=dhyana user-72=eatspam user-73=darkstar user-74=beauty user-75=nsceres user-76=burydropin user-77=fawcettd user-78=steve user-79=zebrapho user-80=bwppodcast user-81=asandcoc user-82=sibtoncc user-83=courseme user-84=eugincou user-85=hirefootballgame user-86=howardon user-87=paulmca1 user-88=pugwash user-89=cwsocial user-90=reliable user-91=ninejimm user-92=cathski user-93=cambria1 user-94=tigerlet user-95=barbersh user-96=hidden user-97=nomistakes user-98=smrszyqg user-99=isleofwi user-100=philmcph user-101=ctedorgu
Sep 18 13:12:07 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=steakbridieme user-103=donnychicago user-104=firstre5 user-105=lkpier user-106=fortunaz user-107=health2045 user-108=leftie user-109=foods user-110=nscdp user-111=romaldki user-112=branko user-113=outdoorc user-114=hodgsonmail user-115=ranxterc user-116=onlycont user-117=attlebor user-118=lucy user-119=careers user-120=nbhavers user-121=david user-122=mcdermos user-123=chrisdal user-124=jennimil user-125=tomandle user-126=design user-127=kategilpin user-128=ladburyp user-129=stagingerris user-130=dancinggardener user-131=nvihkvu user-132=cath user-133=sketchy user-134=havantho user-135=what user-136=oubpgvbx user-137=tstardom user-138=sosevalu user-139=crrtipdl user-140=bakery user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 13:12:07 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 13:12:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:10 nativespace-cdp sudo[3511918]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 13:12:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:12 nativespace-cdp sudo[3511951]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-n506nQFskGC7gUy5.~
Sep 18 13:12:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:12 nativespace-cdp sudo[3511955]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-n506nQFskGC7gUy5.~'
Sep 18 13:12:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:12 nativespace-cdp sudo[3511959]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-n506nQFskGC7gUy5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 13:12:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:12 nativespace-cdp sudo[3511963]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 13:12:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:12 nativespace-cdp sudo[3511966]: pam_unix(sudo:session): session closed for user root
Sep 18 13:12:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 13:12:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 13:12:33 nativespace-cdp sudo[3512097]: pam_unix(sudo:session): session closed for user root
Sep 18 13:16:35 nativespace-cdp sshd[3513684]: Connection closed by 159.100.136.21 port 58424 [preauth]
Sep 18 13:21:33 nativespace-cdp sshd[3516175]: Connection closed by 159.100.136.21 port 39518 [preauth]
Sep 18 13:26:35 nativespace-cdp sshd[3518325]: Connection closed by 159.100.136.21 port 49112 [preauth]
Sep 18 13:31:33 nativespace-cdp sshd[3520784]: Connection closed by 159.100.136.21 port 58418 [preauth]
Sep 18 13:36:33 nativespace-cdp sshd[3524008]: Connection closed by 159.100.136.21 port 39692 [preauth]
Sep 18 13:39:25 nativespace-cdp sshd[3511325]: Received disconnect from 185.67.178.249 port 55312:11: Normal Shutdown
Sep 18 13:39:25 nativespace-cdp sshd[3511325]: Disconnected from 185.67.178.249 port 55312
Sep 18 13:39:25 nativespace-cdp sshd[3511325]: pam_unix(sshd:session): session closed for user root
Sep 18 13:41:33 nativespace-cdp sshd[3526683]: Connection closed by 159.100.136.21 port 48732 [preauth]
Sep 18 13:46:33 nativespace-cdp sshd[3527980]: Connection closed by 159.100.136.21 port 58042 [preauth]
Sep 18 13:51:37 nativespace-cdp sshd[3529802]: Connection closed by 159.100.136.21 port 39450 [preauth]
Sep 18 13:56:35 nativespace-cdp sshd[3531037]: Connection closed by 159.100.136.21 port 47034 [preauth]
Sep 18 14:01:33 nativespace-cdp sshd[3532191]: Connection closed by 159.100.136.21 port 55386 [preauth]
Sep 18 14:06:35 nativespace-cdp sshd[3533843]: Connection closed by 159.100.136.21 port 34874 [preauth]
Sep 18 14:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 14:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:28 nativespace-cdp sudo[3534437]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 14:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:28 nativespace-cdp sudo[3534446]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 14:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:29 nativespace-cdp sudo[3534454]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 14:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:30 nativespace-cdp sudo[3534478]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 14:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:33 nativespace-cdp sudo[3534484]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 14:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:33 nativespace-cdp sudo[3534499]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 14:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:33 nativespace-cdp sudo[3534505]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 14:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:34 nativespace-cdp sudo[3534509]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 14:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:34 nativespace-cdp sudo[3534514]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 14:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:34 nativespace-cdp sudo[3534520]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 14:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:34 nativespace-cdp sudo[3534525]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 14:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:36 nativespace-cdp sudo[3534536]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 14:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:36 nativespace-cdp sudo[3534542]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=burydropin user-3=fawcettd user-4=dhyana user-5=beauty user-6=eatspam user-7=darkstar user-8=asandcoc user-9=sibtoncc user-10=steve user-11=bwppodcast user-12=zebrapho user-13=paulmca1 user-14=howardon user-15=pugwash user-16=cwsocial user-17=cathski user-18=cambria1 user-19=ninejimm user-20=reliable user-21=eugincou user-22=courseme user-23=hirefootballgame user-24=lkpier user-25=philmcph user-26=ctedorgu user-27=donnychicago user-28=firstre5 user-29=steakbridieme user-30=nscdp user-31=fortunaz user-32=health2045 user-33=foods user-34=leftie user-35=hidden user-36=nomistakes user-37=tigerlet user-38=barbersh user-39=smrszyqg user-40=isleofwi user-41=onlycont user-42=attlebor user-43=lucy user-44=romaldki user-45=outdoorc user-46=hodgsonmail user-47=ranxterc user-48=branko
Sep 18 14:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jennimil user-50=tomandle user-51=nbhavers user-52=careers user-53=david user-54=chrisdal user-55=mcdermos user-56=cath user-57=sketchy user-58=havantho user-59=nvihkvu user-60=oubpgvbx user-61=tstardom user-62=what user-63=design user-64=ladburyp user-65=dancinggardener user-66=stagingerris user-67=kategilpin user-68=boldover user-69=nove user-70=bakery user-71=sosevalu user-72=crrtipdl user-73=spectrum user-74=theblack user-75=hodgesonweb user-76=jarvisin user-77=stephani user-78=leereyn1 user-79=still user-80=agproduc user-81=athenare user-82=connect9 user-83=vantagep user-84=maflemin user-85=lbscrmod user-86=markward user-87=foundation user-88=booff user-89=ulsukarm user-90=dickemery123 user-91=ptkxhsbt user-92=martsblo user-93=magichat user-94=lbhyisi user-95=hhdugcor user-96=strathar user-97=sarafoundation user-98=atestord user-99=lakesan1 user-100=brmrjxl user-101=musorguk user-102=megacards
Sep 18 14:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=wilsonsw user-104=hubmaster user-105=carsinyo user-106=fetch user-107=gilpin user-108=milloyco user-109=elecleis user-110=connectedshoppin user-111=thqkgnbz user-112=accooper user-113=ianrayne user-114=coursemc user-115=opaiscyx user-116=seftvta user-117=jonhartl user-118=ultbcrra user-119=firstres user-120=firstred user-121=southlon user-122=highlegh user-123=firstrel user-124=clarkass user-125=costestimatorco user-126=skyfirec user-127=alexadmin user-128=nativene user-129=innovat1 user-130=askhform user-131=stuartge user-132=firstre2 user-133=vivienn1 user-134=battlere user-135=oneoarco user-136=brighto1 user-137=nstriton user-138=belle user-139=ggaaorgu user-140=newstoda user-141=bemadonn user-142=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 14:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 14:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:37 nativespace-cdp sudo[3534551]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:38 nativespace-cdp sudo[3534563]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fkB4O47LsCJ35FuF.~
Sep 18 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:38 nativespace-cdp sudo[3534568]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fkB4O47LsCJ35FuF.~'
Sep 18 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:38 nativespace-cdp sudo[3534572]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fkB4O47LsCJ35FuF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:38 nativespace-cdp sudo[3534579]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:38 nativespace-cdp sudo[3534584]: pam_unix(sudo:session): session closed for user root
Sep 18 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 14:09:40 nativespace-cdp sudo[3534606]: pam_unix(sudo:session): session closed for user root
Sep 18 14:11:33 nativespace-cdp sshd[3535094]: Connection closed by 159.100.136.21 port 41962 [preauth]
Sep 18 14:16:36 nativespace-cdp sshd[3536457]: Connection closed by 159.100.136.21 port 51892 [preauth]
Sep 18 14:21:33 nativespace-cdp sshd[3537543]: Connection closed by 159.100.136.21 port 32868 [preauth]
Sep 18 14:26:34 nativespace-cdp sshd[3539026]: Connection closed by 159.100.136.21 port 42238 [preauth]
Sep 18 14:31:33 nativespace-cdp sshd[3540247]: Connection closed by 159.100.136.21 port 51256 [preauth]
Sep 18 14:36:37 nativespace-cdp sshd[3542023]: Connection closed by 159.100.136.21 port 60932 [preauth]
Sep 18 14:41:33 nativespace-cdp sshd[3543039]: Connection closed by 159.100.136.21 port 41276 [preauth]
Sep 18 14:46:33 nativespace-cdp sshd[3544351]: Connection closed by 159.100.136.21 port 50290 [preauth]
Sep 18 14:51:34 nativespace-cdp sshd[3546056]: Connection closed by 159.100.136.21 port 58942 [preauth]
Sep 18 14:56:33 nativespace-cdp sshd[3547182]: Connection closed by 159.100.136.21 port 39848 [preauth]
Sep 18 15:01:34 nativespace-cdp sshd[3548469]: Connection closed by 159.100.136.21 port 48920 [preauth]
Sep 18 15:06:33 nativespace-cdp sshd[3550184]: Connection closed by 159.100.136.21 port 56966 [preauth]
Sep 18 15:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 15:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:21 nativespace-cdp sudo[3550775]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 15:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:21 nativespace-cdp sudo[3550779]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 15:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:22 nativespace-cdp sudo[3550784]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 15:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:22 nativespace-cdp sudo[3550792]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 15:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550798]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 15:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550815]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 15:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550820]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 15:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550824]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 15:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550829]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 15:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550834]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 15:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:25 nativespace-cdp sudo[3550840]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 15:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:32 nativespace-cdp sudo[3550863]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 15:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:33 nativespace-cdp sudo[3550869]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=smrszyqg user-2=isleofwi user-3=tigerlet user-4=barbersh user-5=nomistakes user-6=hidden user-7=foods user-8=leftie user-9=fortunaz user-10=health2045 user-11=nscdp user-12=steakbridieme user-13=donnychicago user-14=firstre5 user-15=philmcph user-16=ctedorgu user-17=lkpier user-18=hirefootballgame user-19=courseme user-20=eugincou user-21=reliable user-22=ninejimm user-23=cambria1 user-24=cathski user-25=cwsocial user-26=paulmca1 user-27=howardon user-28=pugwash user-29=zebrapho user-30=bwppodcast user-31=steve user-32=asandcoc user-33=sibtoncc user-34=darkstar user-35=eatspam user-36=beauty user-37=dhyana user-38=fawcettd user-39=burydropin user-40=nsceres user-41=crrtipdl user-42=sosevalu user-43=bakery user-44=nove user-45=boldover user-46=kategilpin user-47=stagingerris
Sep 18 15:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=dancinggardener user-49=ladburyp user-50=design user-51=what user-52=oubpgvbx user-53=tstardom user-54=nvihkvu user-55=havantho user-56=sketchy user-57=cath user-58=mcdermos user-59=chrisdal user-60=david user-61=nbhavers user-62=careers user-63=tomandle user-64=jennimil user-65=branko user-66=ranxterc user-67=hodgsonmail user-68=outdoorc user-69=romaldki user-70=lucy user-71=attlebor user-72=onlycont user-73=wilsonsw user-74=megacards user-75=musorguk user-76=brmrjxl user-77=lakesan1 user-78=atestord user-79=sarafoundation user-80=strathar user-81=hhdugcor user-82=lbhyisi user-83=magichat user-84=martsblo user-85=ptkxhsbt user-86=dickemery123 user-87=ulsukarm user-88=foundation user-89=markward user-90=booff user-91=lbscrmod user-92=maflemin user-93=vantagep user-94=connect9 user-95=athenare user-96=agproduc user-97=still user-98=leereyn1 user-99=stephani user-100=jarvisin user-101=theblack
Sep 18 15:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hodgesonweb user-103=spectrum user-104=bedfords user-105=bemadonn user-106=newstoda user-107=ggaaorgu user-108=belle user-109=nstriton user-110=brighto1 user-111=oneoarco user-112=battlere user-113=vivienn1 user-114=firstre2 user-115=askhform user-116=stuartge user-117=innovat1 user-118=nativene user-119=skyfirec user-120=alexadmin user-121=costestimatorco user-122=clarkass user-123=firstrel user-124=highlegh user-125=southlon user-126=firstred user-127=firstres user-128=ultbcrra user-129=seftvta user-130=jonhartl user-131=coursemc user-132=opaiscyx user-133=ianrayne user-134=accooper user-135=thqkgnbz user-136=connectedshoppin user-137=elecleis user-138=milloyco user-139=gilpin user-140=fetch user-141=carsinyo user-142=hubmaster feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 15:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 15:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:33 nativespace-cdp sudo[3550876]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 15:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:33 nativespace-cdp sudo[3550883]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-f5A7wtxqRNmd2TeX.~
Sep 18 15:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:34 nativespace-cdp sudo[3550888]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-f5A7wtxqRNmd2TeX.~'
Sep 18 15:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:34 nativespace-cdp sudo[3550892]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-f5A7wtxqRNmd2TeX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 15:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:34 nativespace-cdp sudo[3550898]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 15:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:34 nativespace-cdp sudo[3550904]: pam_unix(sudo:session): session closed for user root
Sep 18 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 15:09:51 nativespace-cdp sudo[3550976]: pam_unix(sudo:session): session closed for user root
Sep 18 15:11:33 nativespace-cdp sshd[3551487]: Connection closed by 159.100.136.21 port 38070 [preauth]
Sep 18 15:16:34 nativespace-cdp sshd[3552799]: Connection closed by 159.100.136.21 port 47318 [preauth]
Sep 18 15:21:33 nativespace-cdp sshd[3554526]: Connection closed by 159.100.136.21 port 56572 [preauth]
Sep 18 15:26:34 nativespace-cdp sshd[3555609]: Connection closed by 159.100.136.21 port 37712 [preauth]
Sep 18 15:31:33 nativespace-cdp sshd[3556746]: Connection closed by 159.100.136.21 port 46898 [preauth]
Sep 18 15:36:33 nativespace-cdp sshd[3558537]: Connection closed by 159.100.136.21 port 56454 [preauth]
Sep 18 15:41:36 nativespace-cdp sshd[3559742]: Connection closed by 159.100.136.21 port 36846 [preauth]
Sep 18 15:46:33 nativespace-cdp sshd[3560963]: Connection closed by 159.100.136.21 port 45800 [preauth]
Sep 18 15:51:33 nativespace-cdp sshd[3562431]: Connection closed by 159.100.136.21 port 55024 [preauth]
Sep 18 15:56:33 nativespace-cdp sshd[3563972]: Connection closed by 159.100.136.21 port 36236 [preauth]
Sep 18 16:01:33 nativespace-cdp sshd[3565357]: Connection closed by 159.100.136.21 port 45690 [preauth]
Sep 18 16:06:33 nativespace-cdp sshd[3566625]: Connection closed by 159.100.136.21 port 53570 [preauth]
Sep 18 16:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 16:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:22 nativespace-cdp sudo[3567262]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 16:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:22 nativespace-cdp sudo[3567266]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 16:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:22 nativespace-cdp sudo[3567271]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 16:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:22 nativespace-cdp sudo[3567278]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 16:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567284]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567304]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567309]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567313]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567319]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567325]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 16:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:24 nativespace-cdp sudo[3567330]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 16:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:26 nativespace-cdp sudo[3567345]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 16:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:26 nativespace-cdp sudo[3567352]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=martsblo user-2=ptkxhsbt user-3=dickemery123 user-4=lbhyisi user-5=hhdugcor user-6=magichat user-7=lakesan1 user-8=brmrjxl user-9=sarafoundation user-10=atestord user-11=strathar user-12=wilsonsw user-13=musorguk user-14=megacards user-15=jarvisin user-16=theblack user-17=hodgesonweb user-18=spectrum user-19=still user-20=agproduc user-21=leereyn1 user-22=stephani user-23=foundation user-24=markward user-25=booff user-26=maflemin user-27=lbscrmod user-28=athenare user-29=connect9 user-30=vantagep user-31=ulsukarm user-32=alexadmin user-33=skyfirec user-34=askhform user-35=stuartge user-36=innovat1 user-37=nativene user-38=brighto1 user-39=nstriton user-40=battlere user-41=oneoarco user-42=firstre2 user-43=vivienn1 user-44=bedfords user-45=bemadonn user-46=belle user-47=ggaaorgu user-48=newstoda
Sep 18 16:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=elecleis user-50=milloyco user-51=gilpin user-52=carsinyo user-53=fetch user-54=hubmaster user-55=ianrayne user-56=accooper user-57=thqkgnbz user-58=connectedshoppin user-59=firstres user-60=jonhartl user-61=seftvta user-62=ultbcrra user-63=coursemc user-64=opaiscyx user-65=costestimatorco user-66=clarkass user-67=firstrel user-68=southlon user-69=highlegh user-70=firstred user-71=reliable user-72=ninejimm user-73=cambria1 user-74=cathski user-75=paulmca1 user-76=howardon user-77=pugwash user-78=cwsocial user-79=hirefootballgame user-80=courseme user-81=eugincou user-82=fortunaz user-83=health2045 user-84=leftie user-85=foods user-86=nscdp user-87=philmcph user-88=ctedorgu user-89=donnychicago user-90=steakbridieme user-91=firstre5 user-92=lkpier user-93=smrszyqg user-94=isleofwi user-95=tigerlet user-96=barbersh user-97=hidden user-98=nomistakes user-99=burydropin user-100=fawcettd user-101=nsceres
Sep 18 16:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=darkstar user-104=beauty user-105=dhyana user-106=asandcoc user-107=sibtoncc user-108=zebrapho user-109=bwppodcast user-110=steve user-111=what user-112=oubpgvbx user-113=tstardom user-114=nvihkvu user-115=cath user-116=sketchy user-117=havantho user-118=kategilpin user-119=ladburyp user-120=dancinggardener user-121=stagingerris user-122=design user-123=nove user-124=boldover user-125=sosevalu user-126=crrtipdl user-127=bakery user-128=attlebor user-129=lucy user-130=onlycont user-131=branko user-132=hodgsonmail user-133=ranxterc user-134=outdoorc user-135=romaldki user-136=tomandle user-137=jennimil user-138=mcdermos user-139=chrisdal user-140=careers user-141=nbhavers user-142=david feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 16:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 16:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:27 nativespace-cdp sudo[3567362]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:27 nativespace-cdp sudo[3567369]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VWFQXilhpImQStJb.~
Sep 18 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:27 nativespace-cdp sudo[3567378]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VWFQXilhpImQStJb.~'
Sep 18 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:27 nativespace-cdp sudo[3567382]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VWFQXilhpImQStJb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:27 nativespace-cdp sudo[3567388]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 16:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:27 nativespace-cdp sudo[3567393]: pam_unix(sudo:session): session closed for user root
Sep 18 16:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 16:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 16:09:44 nativespace-cdp sudo[3567490]: pam_unix(sudo:session): session closed for user root
Sep 18 16:11:33 nativespace-cdp sshd[3568108]: Connection closed by 159.100.136.21 port 34704 [preauth]
Sep 18 16:16:33 nativespace-cdp sshd[3569535]: Connection closed by 159.100.136.21 port 43996 [preauth]
Sep 18 16:21:33 nativespace-cdp sshd[3570879]: Connection closed by 159.100.136.21 port 53226 [preauth]
Sep 18 16:26:33 nativespace-cdp sshd[3572301]: Connection closed by 159.100.136.21 port 34262 [preauth]
Sep 18 16:31:35 nativespace-cdp sshd[3573467]: Connection closed by 159.100.136.21 port 43394 [preauth]
Sep 18 16:36:34 nativespace-cdp sshd[3575161]: Connection closed by 159.100.136.21 port 52806 [preauth]
Sep 18 16:41:33 nativespace-cdp sshd[3576297]: Connection closed by 159.100.136.21 port 34006 [preauth]
Sep 18 16:46:33 nativespace-cdp sshd[3577644]: Connection closed by 159.100.136.21 port 43366 [preauth]
Sep 18 16:51:35 nativespace-cdp sshd[3578905]: Connection closed by 159.100.136.21 port 52826 [preauth]
Sep 18 16:56:36 nativespace-cdp sshd[3580869]: Connection closed by 159.100.136.21 port 34500 [preauth]
Sep 18 17:01:33 nativespace-cdp sshd[3582804]: Connection closed by 159.100.136.21 port 44106 [preauth]
Sep 18 17:04:30 nativespace-cdp sshd[3583444]: Invalid user test from 45.131.133.97 port 61292
Sep 18 17:04:31 nativespace-cdp sshd[3583444]: input_userauth_request: invalid user test [preauth]
Sep 18 17:04:31 nativespace-cdp sshd[3583444]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:04:31 nativespace-cdp sshd[3583444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.133.97
Sep 18 17:04:32 nativespace-cdp sshd[3583444]: Failed password for invalid user test from 45.131.133.97 port 61292 ssh2
Sep 18 17:04:32 nativespace-cdp sshd[3583444]: Received disconnect from 45.131.133.97 port 61292:11: Bye Bye [preauth]
Sep 18 17:04:32 nativespace-cdp sshd[3583444]: Disconnected from 45.131.133.97 port 61292 [preauth]
Sep 18 17:04:55 nativespace-cdp sshd[3583516]: Invalid user deploy from 164.92.134.187 port 52458
Sep 18 17:04:55 nativespace-cdp sshd[3583516]: input_userauth_request: invalid user deploy [preauth]
Sep 18 17:04:55 nativespace-cdp sshd[3583516]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:04:55 nativespace-cdp sshd[3583516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.134.187
Sep 18 17:04:56 nativespace-cdp sshd[3583531]: Invalid user postgres from 192.210.174.91 port 37372
Sep 18 17:04:56 nativespace-cdp sshd[3583531]: input_userauth_request: invalid user postgres [preauth]
Sep 18 17:04:56 nativespace-cdp sshd[3583531]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:04:56 nativespace-cdp sshd[3583531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.210.174.91
Sep 18 17:04:57 nativespace-cdp sshd[3583516]: Failed password for invalid user deploy from 164.92.134.187 port 52458 ssh2
Sep 18 17:04:57 nativespace-cdp sshd[3583516]: Received disconnect from 164.92.134.187 port 52458:11: Bye Bye [preauth]
Sep 18 17:04:57 nativespace-cdp sshd[3583516]: Disconnected from 164.92.134.187 port 52458 [preauth]
Sep 18 17:04:58 nativespace-cdp sshd[3583531]: Failed password for invalid user postgres from 192.210.174.91 port 37372 ssh2
Sep 18 17:04:58 nativespace-cdp sshd[3583531]: Received disconnect from 192.210.174.91 port 37372:11: Bye Bye [preauth]
Sep 18 17:04:58 nativespace-cdp sshd[3583531]: Disconnected from 192.210.174.91 port 37372 [preauth]
Sep 18 17:05:19 nativespace-cdp sshd[3583868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.255.103.194  user=root
Sep 18 17:05:19 nativespace-cdp sshd[3583868]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 18 17:05:21 nativespace-cdp sshd[3583868]: Failed password for root from 218.255.103.194 port 51360 ssh2
Sep 18 17:05:23 nativespace-cdp sshd[3583868]: Received disconnect from 218.255.103.194 port 51360:11: Bye Bye [preauth]
Sep 18 17:05:23 nativespace-cdp sshd[3583868]: Disconnected from 218.255.103.194 port 51360 [preauth]
Sep 18 17:06:33 nativespace-cdp sshd[3584294]: Connection closed by 159.100.136.21 port 54068 [preauth]
Sep 18 17:08:03 nativespace-cdp sshd[3584515]: Invalid user student02 from 1.214.197.163 port 42854
Sep 18 17:08:03 nativespace-cdp sshd[3584515]: input_userauth_request: invalid user student02 [preauth]
Sep 18 17:08:03 nativespace-cdp sshd[3584515]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:08:03 nativespace-cdp sshd[3584515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.197.163
Sep 18 17:08:05 nativespace-cdp sshd[3584515]: Failed password for invalid user student02 from 1.214.197.163 port 42854 ssh2
Sep 18 17:08:05 nativespace-cdp sshd[3584515]: Received disconnect from 1.214.197.163 port 42854:11: Bye Bye [preauth]
Sep 18 17:08:05 nativespace-cdp sshd[3584515]: Disconnected from 1.214.197.163 port 42854 [preauth]
Sep 18 17:08:30 nativespace-cdp sshd[3584597]: Invalid user sysadmin from 45.131.133.97 port 26074
Sep 18 17:08:30 nativespace-cdp sshd[3584597]: input_userauth_request: invalid user sysadmin [preauth]
Sep 18 17:08:30 nativespace-cdp sshd[3584597]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:08:30 nativespace-cdp sshd[3584597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.133.97
Sep 18 17:08:33 nativespace-cdp sshd[3584597]: Failed password for invalid user sysadmin from 45.131.133.97 port 26074 ssh2
Sep 18 17:08:33 nativespace-cdp sshd[3584597]: Received disconnect from 45.131.133.97 port 26074:11: Bye Bye [preauth]
Sep 18 17:08:33 nativespace-cdp sshd[3584597]: Disconnected from 45.131.133.97 port 26074 [preauth]
Sep 18 17:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 17:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:27 nativespace-cdp sudo[3584767]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 17:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:27 nativespace-cdp sudo[3584772]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:29 nativespace-cdp sudo[3584777]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 17:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:29 nativespace-cdp sudo[3584785]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 17:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584791]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 17:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584870]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 17:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584876]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 17:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584880]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 17:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584885]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 17:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584891]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 17:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:54 nativespace-cdp sudo[3584897]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:59 nativespace-cdp sudo[3584922]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:09:59 nativespace-cdp sudo[3584930]: pam_unix(sudo:session): session closed for user root
Sep 18 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=opaiscyx user-2=coursemc user-3=firstres user-4=ultbcrra user-5=seftvta user-6=jonhartl user-7=highlegh user-8=southlon user-9=firstred user-10=costestimatorco user-11=clarkass user-12=firstrel user-13=fetch user-14=carsinyo user-15=hubmaster user-16=elecleis user-17=gilpin user-18=milloyco user-19=thqkgnbz user-20=connectedshoppin user-21=ianrayne user-22=accooper user-23=oneoarco user-24=battlere user-25=vivienn1 user-26=firstre2 user-27=nstriton user-28=brighto1 user-29=bemadonn user-30=newstoda user-31=belle user-32=ggaaorgu user-33=bedfords user-34=skyfirec user-35=alexadmin user-36=nativene user-37=stuartge user-38=askhform user-39=innovat1 user-40=lbscrmod user-41=maflemin user-42=vantagep user-43=athenare user-44=connect9 user-45=markward user-46=foundation user-47=booff user-48=ulsukarm
Sep 18 17:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=theblack user-50=hodgesonweb user-51=spectrum user-52=jarvisin user-53=leereyn1 user-54=stephani user-55=agproduc user-56=still user-57=atestord user-58=sarafoundation user-59=strathar user-60=brmrjxl user-61=lakesan1 user-62=megacards user-63=musorguk user-64=wilsonsw user-65=ptkxhsbt user-66=dickemery123 user-67=martsblo user-68=magichat user-69=hhdugcor user-70=lbhyisi user-71=jennimil user-72=tomandle user-73=david user-74=careers user-75=nbhavers user-76=mcdermos user-77=chrisdal user-78=onlycont user-79=lucy user-80=attlebor user-81=romaldki user-82=branko user-83=hodgsonmail user-84=ranxterc user-85=outdoorc user-86=boldover user-87=nove user-88=crrtipdl user-89=sosevalu user-90=bakery user-91=nvihkvu user-92=havantho user-93=cath user-94=sketchy user-95=what user-96=oubpgvbx user-97=tstardom user-98=design user-99=kategilpin user-100=stagingerris user-101=dancinggardener user-102=ladburyp
Sep 18 17:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=asandcoc user-104=sibtoncc user-105=steve user-106=zebrapho user-107=bwppodcast user-108=nsceres user-109=fawcettd user-110=burydropin user-111=dhyana user-112=darkstar user-113=eatspam user-114=beauty user-115=donnychicago user-116=firstre5 user-117=steakbridieme user-118=philmcph user-119=ctedorgu user-120=lkpier user-121=leftie user-122=foods user-123=fortunaz user-124=health2045 user-125=nscdp user-126=tigerlet user-127=barbersh user-128=nomistakes user-129=hidden user-130=smrszyqg user-131=isleofwi user-132=cwsocial user-133=pugwash user-134=howardon user-135=paulmca1 user-136=reliable user-137=ninejimm user-138=cathski user-139=cambria1 user-140=courseme user-141=eugincou user-142=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 17:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:00 nativespace-cdp sudo[3584937]: pam_unix(sudo:session): session closed for user root
Sep 18 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:01 nativespace-cdp sudo[3584965]: pam_unix(sudo:session): session closed for user root
Sep 18 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vP8QmKyoNCeAGiCi.~
Sep 18 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:01 nativespace-cdp sudo[3585033]: pam_unix(sudo:session): session closed for user root
Sep 18 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vP8QmKyoNCeAGiCi.~'
Sep 18 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:01 nativespace-cdp sudo[3585037]: pam_unix(sudo:session): session closed for user root
Sep 18 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vP8QmKyoNCeAGiCi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:01 nativespace-cdp sudo[3585042]: pam_unix(sudo:session): session closed for user root
Sep 18 17:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 17:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:01 nativespace-cdp sudo[3585046]: pam_unix(sudo:session): session closed for user root
Sep 18 17:10:05 nativespace-cdp sshd[3585083]: Invalid user csgoserver from 45.131.133.97 port 24954
Sep 18 17:10:05 nativespace-cdp sshd[3585083]: input_userauth_request: invalid user csgoserver [preauth]
Sep 18 17:10:05 nativespace-cdp sshd[3585083]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:10:05 nativespace-cdp sshd[3585083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.133.97
Sep 18 17:10:07 nativespace-cdp sshd[3585083]: Failed password for invalid user csgoserver from 45.131.133.97 port 24954 ssh2
Sep 18 17:10:07 nativespace-cdp sshd[3585083]: Received disconnect from 45.131.133.97 port 24954:11: Bye Bye [preauth]
Sep 18 17:10:07 nativespace-cdp sshd[3585083]: Disconnected from 45.131.133.97 port 24954 [preauth]
Sep 18 17:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 17:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 17:10:22 nativespace-cdp sudo[3585198]: pam_unix(sudo:session): session closed for user root
Sep 18 17:11:08 nativespace-cdp sshd[3585494]: Invalid user test from 192.210.174.91 port 39486
Sep 18 17:11:08 nativespace-cdp sshd[3585494]: input_userauth_request: invalid user test [preauth]
Sep 18 17:11:08 nativespace-cdp sshd[3585494]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:11:08 nativespace-cdp sshd[3585494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.210.174.91
Sep 18 17:11:11 nativespace-cdp sshd[3585494]: Failed password for invalid user test from 192.210.174.91 port 39486 ssh2
Sep 18 17:11:11 nativespace-cdp sshd[3585494]: Received disconnect from 192.210.174.91 port 39486:11: Bye Bye [preauth]
Sep 18 17:11:11 nativespace-cdp sshd[3585494]: Disconnected from 192.210.174.91 port 39486 [preauth]
Sep 18 17:11:14 nativespace-cdp sshd[3585513]: Invalid user ubuntu from 218.255.103.194 port 50618
Sep 18 17:11:14 nativespace-cdp sshd[3585513]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 17:11:14 nativespace-cdp sshd[3585513]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:11:14 nativespace-cdp sshd[3585513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.255.103.194
Sep 18 17:11:16 nativespace-cdp sshd[3585513]: Failed password for invalid user ubuntu from 218.255.103.194 port 50618 ssh2
Sep 18 17:11:16 nativespace-cdp sshd[3585513]: Received disconnect from 218.255.103.194 port 50618:11: Bye Bye [preauth]
Sep 18 17:11:16 nativespace-cdp sshd[3585513]: Disconnected from 218.255.103.194 port 50618 [preauth]
Sep 18 17:11:20 nativespace-cdp sshd[3585537]: Invalid user user3 from 164.92.134.187 port 48144
Sep 18 17:11:20 nativespace-cdp sshd[3585537]: input_userauth_request: invalid user user3 [preauth]
Sep 18 17:11:20 nativespace-cdp sshd[3585537]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:11:20 nativespace-cdp sshd[3585537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.134.187
Sep 18 17:11:22 nativespace-cdp sshd[3585537]: Failed password for invalid user user3 from 164.92.134.187 port 48144 ssh2
Sep 18 17:11:22 nativespace-cdp sshd[3585537]: Received disconnect from 164.92.134.187 port 48144:11: Bye Bye [preauth]
Sep 18 17:11:22 nativespace-cdp sshd[3585537]: Disconnected from 164.92.134.187 port 48144 [preauth]
Sep 18 17:11:32 nativespace-cdp sshd[3585571]: Invalid user ubuntu from 1.214.197.163 port 50780
Sep 18 17:11:32 nativespace-cdp sshd[3585571]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 17:11:32 nativespace-cdp sshd[3585571]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:11:32 nativespace-cdp sshd[3585571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.197.163
Sep 18 17:11:33 nativespace-cdp sshd[3585585]: Connection closed by 159.100.136.21 port 35154 [preauth]
Sep 18 17:11:34 nativespace-cdp sshd[3585571]: Failed password for invalid user ubuntu from 1.214.197.163 port 50780 ssh2
Sep 18 17:11:34 nativespace-cdp sshd[3585571]: Received disconnect from 1.214.197.163 port 50780:11: Bye Bye [preauth]
Sep 18 17:11:34 nativespace-cdp sshd[3585571]: Disconnected from 1.214.197.163 port 50780 [preauth]
Sep 18 17:11:51 nativespace-cdp sshd[3585623]: Invalid user abc from 192.210.174.91 port 52232
Sep 18 17:11:51 nativespace-cdp sshd[3585623]: input_userauth_request: invalid user abc [preauth]
Sep 18 17:11:51 nativespace-cdp sshd[3585623]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:11:51 nativespace-cdp sshd[3585623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.210.174.91
Sep 18 17:11:53 nativespace-cdp sshd[3585623]: Failed password for invalid user abc from 192.210.174.91 port 52232 ssh2
Sep 18 17:11:56 nativespace-cdp sshd[3585659]: Invalid user centos01 from 164.92.134.187 port 46744
Sep 18 17:11:56 nativespace-cdp sshd[3585659]: input_userauth_request: invalid user centos01 [preauth]
Sep 18 17:11:56 nativespace-cdp sshd[3585659]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:11:56 nativespace-cdp sshd[3585659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.134.187
Sep 18 17:11:58 nativespace-cdp sshd[3585659]: Failed password for invalid user centos01 from 164.92.134.187 port 46744 ssh2
Sep 18 17:11:59 nativespace-cdp sshd[3585659]: Received disconnect from 164.92.134.187 port 46744:11: Bye Bye [preauth]
Sep 18 17:11:59 nativespace-cdp sshd[3585659]: Disconnected from 164.92.134.187 port 46744 [preauth]
Sep 18 17:12:03 nativespace-cdp sshd[3585673]: Connection closed by 218.255.103.194 port 35162 [preauth]
Sep 18 17:12:21 nativespace-cdp sshd[3585750]: Invalid user user from 1.214.197.163 port 37012
Sep 18 17:12:21 nativespace-cdp sshd[3585750]: input_userauth_request: invalid user user [preauth]
Sep 18 17:12:21 nativespace-cdp sshd[3585750]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:12:21 nativespace-cdp sshd[3585750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.197.163
Sep 18 17:12:24 nativespace-cdp sshd[3585750]: Failed password for invalid user user from 1.214.197.163 port 37012 ssh2
Sep 18 17:12:24 nativespace-cdp sshd[3585750]: Received disconnect from 1.214.197.163 port 37012:11: Bye Bye [preauth]
Sep 18 17:12:24 nativespace-cdp sshd[3585750]: Disconnected from 1.214.197.163 port 37012 [preauth]
Sep 18 17:12:40 nativespace-cdp sshd[3585819]: Invalid user admin from 218.255.103.194 port 47938
Sep 18 17:12:40 nativespace-cdp sshd[3585819]: input_userauth_request: invalid user admin [preauth]
Sep 18 17:12:40 nativespace-cdp sshd[3585819]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 17:12:40 nativespace-cdp sshd[3585819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.255.103.194
Sep 18 17:12:42 nativespace-cdp sshd[3585819]: Failed password for invalid user admin from 218.255.103.194 port 47938 ssh2
Sep 18 17:12:42 nativespace-cdp sshd[3585819]: Received disconnect from 218.255.103.194 port 47938:11: Bye Bye [preauth]
Sep 18 17:12:42 nativespace-cdp sshd[3585819]: Disconnected from 218.255.103.194 port 47938 [preauth]
Sep 18 17:16:33 nativespace-cdp sshd[3587209]: Connection closed by 159.100.136.21 port 45158 [preauth]
Sep 18 17:21:34 nativespace-cdp sshd[3588923]: Connection closed by 159.100.136.21 port 54174 [preauth]
Sep 18 17:26:34 nativespace-cdp sshd[3589947]: Connection closed by 159.100.136.21 port 34992 [preauth]
Sep 18 17:31:33 nativespace-cdp sshd[3591168]: Connection closed by 159.100.136.21 port 43444 [preauth]
Sep 18 17:36:35 nativespace-cdp sshd[3592682]: Connection closed by 159.100.136.21 port 53274 [preauth]
Sep 18 17:41:33 nativespace-cdp sshd[3594021]: Connection closed by 159.100.136.21 port 34446 [preauth]
Sep 18 17:46:33 nativespace-cdp sshd[3595488]: Connection closed by 159.100.136.21 port 43740 [preauth]
Sep 18 17:51:36 nativespace-cdp sshd[3596744]: Connection closed by 159.100.136.21 port 53544 [preauth]
Sep 18 17:56:40 nativespace-cdp sshd[3598096]: Connection closed by 159.100.136.21 port 34830 [preauth]
Sep 18 18:01:34 nativespace-cdp sshd[3599406]: Connection closed by 159.100.136.21 port 44262 [preauth]
Sep 18 18:06:33 nativespace-cdp sshd[3600702]: Connection closed by 159.100.136.21 port 54016 [preauth]
Sep 18 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:27 nativespace-cdp sudo[3601321]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:27 nativespace-cdp sudo[3601325]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 18:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:28 nativespace-cdp sudo[3601330]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 18:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:29 nativespace-cdp sudo[3601340]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 18:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601347]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 18:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601370]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 18:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601377]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 18:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601381]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 18:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601386]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 18:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601392]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 18:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:33 nativespace-cdp sudo[3601398]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:39 nativespace-cdp sudo[3601428]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:39 nativespace-cdp sudo[3601434]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=gilpin user-2=milloyco user-3=elecleis user-4=hubmaster user-5=carsinyo user-6=fetch user-7=accooper user-8=ianrayne user-9=connectedshoppin user-10=thqkgnbz user-11=seftvta user-12=jonhartl user-13=ultbcrra user-14=firstres user-15=coursemc user-16=opaiscyx user-17=clarkass user-18=firstrel user-19=costestimatorco user-20=firstred user-21=southlon user-22=highlegh user-23=skyfirec user-24=alexadmin user-25=innovat1 user-26=stuartge user-27=askhform user-28=nativene user-29=brighto1 user-30=nstriton user-31=firstre2 user-32=vivienn1 user-33=battlere user-34=oneoarco user-35=bedfords user-36=ggaaorgu user-37=belle user-38=newstoda user-39=bemadonn user-40=jarvisin user-41=spectrum user-42=theblack user-43=hodgesonweb user-44=still user-45=agproduc user-46=stephani user-47=leereyn1
Sep 18 18:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=foundation user-49=markward user-50=booff user-51=connect9 user-52=athenare user-53=vantagep user-54=maflemin user-55=lbscrmod user-56=ulsukarm user-57=martsblo user-58=dickemery123 user-59=ptkxhsbt user-60=lbhyisi user-61=hhdugcor user-62=magichat user-63=lakesan1 user-64=brmrjxl user-65=strathar user-66=sarafoundation user-67=atestord user-68=wilsonsw user-69=musorguk user-70=megacards user-71=attlebor user-72=lucy user-73=onlycont user-74=ranxterc user-75=outdoorc user-76=hodgsonmail user-77=branko user-78=romaldki user-79=tomandle user-80=jennimil user-81=chrisdal user-82=mcdermos user-83=nbhavers user-84=careers user-85=david user-86=tstardom user-87=oubpgvbx user-88=what user-89=sketchy user-90=cath user-91=havantho user-92=nvihkvu user-93=ladburyp user-94=dancinggardener user-95=stagingerris user-96=kategilpin user-97=design user-98=nove user-99=boldover user-100=bakery user-101=sosevalu
Sep 18 18:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=burydropin user-104=fawcettd user-105=nsceres user-106=beauty user-107=eatspam user-108=darkstar user-109=dhyana user-110=sibtoncc user-111=asandcoc user-112=bwppodcast user-113=zebrapho user-114=steve user-115=cambria1 user-116=cathski user-117=ninejimm user-118=reliable user-119=howardon user-120=paulmca1 user-121=pugwash user-122=cwsocial user-123=hirefootballgame user-124=eugincou user-125=courseme user-126=nscdp user-127=health2045 user-128=fortunaz user-129=foods user-130=leftie user-131=lkpier user-132=philmcph user-133=ctedorgu user-134=donnychicago user-135=firstre5 user-136=steakbridieme user-137=isleofwi user-138=smrszyqg user-139=hidden user-140=nomistakes user-141=barbersh user-142=tigerlet feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 18:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:40 nativespace-cdp sudo[3601441]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:41 nativespace-cdp sudo[3601452]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ey25Liv1PJMEl9Vz.~
Sep 18 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:41 nativespace-cdp sudo[3601457]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ey25Liv1PJMEl9Vz.~'
Sep 18 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:41 nativespace-cdp sudo[3601461]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ey25Liv1PJMEl9Vz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:41 nativespace-cdp sudo[3601467]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 18:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:41 nativespace-cdp sudo[3601472]: pam_unix(sudo:session): session closed for user root
Sep 18 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 18:09:59 nativespace-cdp sudo[3601541]: pam_unix(sudo:session): session closed for user root
Sep 18 18:11:33 nativespace-cdp sshd[3602212]: Connection closed by 159.100.136.21 port 34932 [preauth]
Sep 18 18:16:36 nativespace-cdp sshd[3603763]: Connection closed by 159.100.136.21 port 44242 [preauth]
Sep 18 18:21:33 nativespace-cdp sshd[3605384]: Connection closed by 159.100.136.21 port 52082 [preauth]
Sep 18 18:26:33 nativespace-cdp sshd[3606464]: Connection closed by 159.100.136.21 port 60486 [preauth]
Sep 18 18:31:33 nativespace-cdp sshd[3607719]: Connection closed by 159.100.136.21 port 41126 [preauth]
Sep 18 18:36:33 nativespace-cdp sshd[3609088]: Connection closed by 159.100.136.21 port 50746 [preauth]
Sep 18 18:41:33 nativespace-cdp sshd[3610369]: Connection closed by 159.100.136.21 port 60178 [preauth]
Sep 18 18:46:33 nativespace-cdp sshd[3611641]: Connection closed by 159.100.136.21 port 41694 [preauth]
Sep 18 18:51:33 nativespace-cdp sshd[3614063]: Connection closed by 159.100.136.21 port 50648 [preauth]
Sep 18 18:56:33 nativespace-cdp sshd[3615053]: Connection closed by 159.100.136.21 port 60338 [preauth]
Sep 18 19:01:34 nativespace-cdp sshd[3616214]: Connection closed by 159.100.136.21 port 41296 [preauth]
Sep 18 19:06:33 nativespace-cdp sshd[3618056]: Connection closed by 159.100.136.21 port 50904 [preauth]
Sep 18 19:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 19:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:28 nativespace-cdp sudo[3618640]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 19:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:28 nativespace-cdp sudo[3618645]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 19:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:30 nativespace-cdp sudo[3618650]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:30 nativespace-cdp sudo[3618662]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:32 nativespace-cdp sudo[3618668]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:33 nativespace-cdp sudo[3618679]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:33 nativespace-cdp sudo[3618684]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:33 nativespace-cdp sudo[3618688]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:33 nativespace-cdp sudo[3618693]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:33 nativespace-cdp sudo[3618698]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:33 nativespace-cdp sudo[3618704]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 19:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:40 nativespace-cdp sudo[3618736]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 19:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:40 nativespace-cdp sudo[3618744]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=zebrapho user-3=bwppodcast user-4=sibtoncc user-5=asandcoc user-6=dhyana user-7=darkstar user-8=eatspam user-9=beauty user-10=nsceres user-11=fawcettd user-12=burydropin user-13=barbersh user-14=tigerlet user-15=nomistakes user-16=hidden user-17=smrszyqg user-18=isleofwi user-19=donnychicago user-20=firstre5 user-21=steakbridieme user-22=philmcph user-23=ctedorgu user-24=lkpier user-25=leftie user-26=foods user-27=health2045 user-28=fortunaz user-29=nscdp user-30=courseme user-31=eugincou user-32=hirefootballgame user-33=cwsocial user-34=paulmca1 user-35=howardon user-36=pugwash user-37=ninejimm user-38=reliable user-39=cambria1 user-40=cathski user-41=david user-42=nbhavers user-43=careers user-44=mcdermos user-45=chrisdal user-46=jennimil user-47=tomandle user-48=romaldki
Sep 18 19:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=branko user-50=ranxterc user-51=hodgsonmail user-52=outdoorc user-53=onlycont user-54=lucy user-55=attlebor user-56=crrtipdl user-57=sosevalu user-58=bakery user-59=boldover user-60=nove user-61=design user-62=kategilpin user-63=dancinggardener user-64=stagingerris user-65=ladburyp user-66=nvihkvu user-67=havantho user-68=sketchy user-69=cath user-70=what user-71=oubpgvbx user-72=tstardom user-73=ulsukarm user-74=lbscrmod user-75=maflemin user-76=vantagep user-77=connect9 user-78=athenare user-79=markward user-80=foundation user-81=booff user-82=leereyn1 user-83=stephani user-84=agproduc user-85=still user-86=theblack user-87=hodgesonweb user-88=spectrum user-89=jarvisin user-90=megacards user-91=musorguk user-92=wilsonsw user-93=atestord user-94=sarafoundation user-95=strathar user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=hhdugcor user-100=lbhyisi user-101=ptkxhsbt user-102=dickemery123
Sep 18 19:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=highlegh user-105=southlon user-106=firstred user-107=costestimatorco user-108=clarkass user-109=firstrel user-110=opaiscyx user-111=coursemc user-112=firstres user-113=ultbcrra user-114=seftvta user-115=jonhartl user-116=thqkgnbz user-117=connectedshoppin user-118=ianrayne user-119=accooper user-120=fetch user-121=carsinyo user-122=hubmaster user-123=elecleis user-124=milloyco user-125=gilpin user-126=bemadonn user-127=newstoda user-128=ggaaorgu user-129=belle user-130=bedfords user-131=oneoarco user-132=battlere user-133=vivienn1 user-134=firstre2 user-135=nstriton user-136=brighto1 user-137=nativene user-138=askhform user-139=stuartge user-140=innovat1 user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 19:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:42 nativespace-cdp sudo[3618750]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:42 nativespace-cdp sudo[3618759]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R6wp6MZStWjOT1SK.~
Sep 18 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:42 nativespace-cdp sudo[3618764]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R6wp6MZStWjOT1SK.~'
Sep 18 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:42 nativespace-cdp sudo[3618768]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-R6wp6MZStWjOT1SK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:42 nativespace-cdp sudo[3618774]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:42 nativespace-cdp sudo[3618779]: pam_unix(sudo:session): session closed for user root
Sep 18 19:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 19:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 19:09:44 nativespace-cdp sudo[3618802]: pam_unix(sudo:session): session closed for user root
Sep 18 19:11:36 nativespace-cdp sshd[3619380]: Connection closed by 159.100.136.21 port 59470 [preauth]
Sep 18 19:13:22 nativespace-cdp sshd[3619644]: Invalid user git from 104.208.108.166 port 56764
Sep 18 19:13:22 nativespace-cdp sshd[3619644]: input_userauth_request: invalid user git [preauth]
Sep 18 19:13:22 nativespace-cdp sshd[3619644]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:13:22 nativespace-cdp sshd[3619644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.208.108.166
Sep 18 19:13:24 nativespace-cdp sshd[3619644]: Failed password for invalid user git from 104.208.108.166 port 56764 ssh2
Sep 18 19:13:25 nativespace-cdp sshd[3619644]: Received disconnect from 104.208.108.166 port 56764:11: Bye Bye [preauth]
Sep 18 19:13:25 nativespace-cdp sshd[3619644]: Disconnected from 104.208.108.166 port 56764 [preauth]
Sep 18 19:14:38 nativespace-cdp sshd[3619832]: Invalid user ftptest from 191.233.25.20 port 1216
Sep 18 19:14:38 nativespace-cdp sshd[3619832]: input_userauth_request: invalid user ftptest [preauth]
Sep 18 19:14:38 nativespace-cdp sshd[3619832]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:14:38 nativespace-cdp sshd[3619832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.25.20
Sep 18 19:14:40 nativespace-cdp sshd[3619832]: Failed password for invalid user ftptest from 191.233.25.20 port 1216 ssh2
Sep 18 19:14:40 nativespace-cdp sshd[3619832]: Received disconnect from 191.233.25.20 port 1216:11: Bye Bye [preauth]
Sep 18 19:14:40 nativespace-cdp sshd[3619832]: Disconnected from 191.233.25.20 port 1216 [preauth]
Sep 18 19:15:09 nativespace-cdp sshd[3620049]: Invalid user ubuntu from 187.72.83.169 port 55418
Sep 18 19:15:09 nativespace-cdp sshd[3620049]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 19:15:09 nativespace-cdp sshd[3620049]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:15:09 nativespace-cdp sshd[3620049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.83.169
Sep 18 19:15:11 nativespace-cdp sshd[3620049]: Failed password for invalid user ubuntu from 187.72.83.169 port 55418 ssh2
Sep 18 19:15:11 nativespace-cdp sshd[3620049]: Received disconnect from 187.72.83.169 port 55418:11: Bye Bye [preauth]
Sep 18 19:15:11 nativespace-cdp sshd[3620049]: Disconnected from 187.72.83.169 port 55418 [preauth]
Sep 18 19:15:55 nativespace-cdp sshd[3620308]: Invalid user ftptest from 202.29.222.90 port 43112
Sep 18 19:15:55 nativespace-cdp sshd[3620308]: input_userauth_request: invalid user ftptest [preauth]
Sep 18 19:15:55 nativespace-cdp sshd[3620308]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:15:55 nativespace-cdp sshd[3620308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.222.90
Sep 18 19:15:57 nativespace-cdp sshd[3620308]: Failed password for invalid user ftptest from 202.29.222.90 port 43112 ssh2
Sep 18 19:15:58 nativespace-cdp sshd[3620308]: Received disconnect from 202.29.222.90 port 43112:11: Bye Bye [preauth]
Sep 18 19:15:58 nativespace-cdp sshd[3620308]: Disconnected from 202.29.222.90 port 43112 [preauth]
Sep 18 19:16:07 nativespace-cdp sshd[3620353]: Invalid user admin from 156.0.255.50 port 42974
Sep 18 19:16:07 nativespace-cdp sshd[3620353]: input_userauth_request: invalid user admin [preauth]
Sep 18 19:16:07 nativespace-cdp sshd[3620353]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:16:07 nativespace-cdp sshd[3620353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.255.50
Sep 18 19:16:08 nativespace-cdp sshd[3620353]: Failed password for invalid user admin from 156.0.255.50 port 42974 ssh2
Sep 18 19:16:12 nativespace-cdp sshd[3620353]: Received disconnect from 156.0.255.50 port 42974:11: Bye Bye [preauth]
Sep 18 19:16:12 nativespace-cdp sshd[3620353]: Disconnected from 156.0.255.50 port 42974 [preauth]
Sep 18 19:16:16 nativespace-cdp sshd[3620373]: Invalid user guest from 103.181.142.154 port 56234
Sep 18 19:16:16 nativespace-cdp sshd[3620373]: input_userauth_request: invalid user guest [preauth]
Sep 18 19:16:16 nativespace-cdp sshd[3620373]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:16:16 nativespace-cdp sshd[3620373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.142.154
Sep 18 19:16:18 nativespace-cdp sshd[3620373]: Failed password for invalid user guest from 103.181.142.154 port 56234 ssh2
Sep 18 19:16:23 nativespace-cdp sshd[3620373]: Received disconnect from 103.181.142.154 port 56234:11: Bye Bye [preauth]
Sep 18 19:16:23 nativespace-cdp sshd[3620373]: Disconnected from 103.181.142.154 port 56234 [preauth]
Sep 18 19:16:35 nativespace-cdp sshd[3620527]: Connection closed by 159.100.136.21 port 40024 [preauth]
Sep 18 19:16:56 nativespace-cdp sshd[3620591]: Invalid user guest from 104.208.108.166 port 9172
Sep 18 19:16:56 nativespace-cdp sshd[3620591]: input_userauth_request: invalid user guest [preauth]
Sep 18 19:16:56 nativespace-cdp sshd[3620591]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:16:56 nativespace-cdp sshd[3620591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.208.108.166
Sep 18 19:16:58 nativespace-cdp sshd[3620591]: Failed password for invalid user guest from 104.208.108.166 port 9172 ssh2
Sep 18 19:16:58 nativespace-cdp sshd[3620591]: Received disconnect from 104.208.108.166 port 9172:11: Bye Bye [preauth]
Sep 18 19:16:58 nativespace-cdp sshd[3620591]: Disconnected from 104.208.108.166 port 9172 [preauth]
Sep 18 19:17:09 nativespace-cdp sshd[3620652]: Invalid user oracle from 128.199.147.72 port 38120
Sep 18 19:17:09 nativespace-cdp sshd[3620652]: input_userauth_request: invalid user oracle [preauth]
Sep 18 19:17:09 nativespace-cdp sshd[3620652]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:17:09 nativespace-cdp sshd[3620652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.147.72
Sep 18 19:17:11 nativespace-cdp sshd[3620652]: Failed password for invalid user oracle from 128.199.147.72 port 38120 ssh2
Sep 18 19:17:11 nativespace-cdp sshd[3620652]: Received disconnect from 128.199.147.72 port 38120:11: Bye Bye [preauth]
Sep 18 19:17:11 nativespace-cdp sshd[3620652]: Disconnected from 128.199.147.72 port 38120 [preauth]
Sep 18 19:17:40 nativespace-cdp sshd[3620770]: Invalid user user1 from 104.208.108.166 port 5648
Sep 18 19:17:40 nativespace-cdp sshd[3620770]: input_userauth_request: invalid user user1 [preauth]
Sep 18 19:17:40 nativespace-cdp sshd[3620770]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:17:40 nativespace-cdp sshd[3620770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.208.108.166
Sep 18 19:17:42 nativespace-cdp sshd[3620770]: Failed password for invalid user user1 from 104.208.108.166 port 5648 ssh2
Sep 18 19:17:42 nativespace-cdp sshd[3620770]: Received disconnect from 104.208.108.166 port 5648:11: Bye Bye [preauth]
Sep 18 19:17:42 nativespace-cdp sshd[3620770]: Disconnected from 104.208.108.166 port 5648 [preauth]
Sep 18 19:17:54 nativespace-cdp sshd[3620820]: Invalid user guest from 159.89.154.119 port 47158
Sep 18 19:17:54 nativespace-cdp sshd[3620820]: input_userauth_request: invalid user guest [preauth]
Sep 18 19:17:54 nativespace-cdp sshd[3620820]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:17:54 nativespace-cdp sshd[3620820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.119
Sep 18 19:17:56 nativespace-cdp sshd[3620820]: Failed password for invalid user guest from 159.89.154.119 port 47158 ssh2
Sep 18 19:17:57 nativespace-cdp sshd[3620820]: Received disconnect from 159.89.154.119 port 47158:11: Bye Bye [preauth]
Sep 18 19:17:57 nativespace-cdp sshd[3620820]: Disconnected from 159.89.154.119 port 47158 [preauth]
Sep 18 19:18:33 nativespace-cdp sshd[3620925]: Invalid user user1 from 103.139.193.249 port 42492
Sep 18 19:18:33 nativespace-cdp sshd[3620925]: input_userauth_request: invalid user user1 [preauth]
Sep 18 19:18:33 nativespace-cdp sshd[3620925]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:18:33 nativespace-cdp sshd[3620925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.193.249
Sep 18 19:18:35 nativespace-cdp sshd[3620925]: Failed password for invalid user user1 from 103.139.193.249 port 42492 ssh2
Sep 18 19:18:40 nativespace-cdp sshd[3620925]: Received disconnect from 103.139.193.249 port 42492:11: Bye Bye [preauth]
Sep 18 19:18:40 nativespace-cdp sshd[3620925]: Disconnected from 103.139.193.249 port 42492 [preauth]
Sep 18 19:18:47 nativespace-cdp sshd[3620962]: Invalid user admin from 187.72.83.169 port 34474
Sep 18 19:18:47 nativespace-cdp sshd[3620962]: input_userauth_request: invalid user admin [preauth]
Sep 18 19:18:47 nativespace-cdp sshd[3620962]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:18:47 nativespace-cdp sshd[3620962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.83.169
Sep 18 19:18:47 nativespace-cdp sshd[3620968]: Invalid user admin from 156.0.255.50 port 42506
Sep 18 19:18:47 nativespace-cdp sshd[3620968]: input_userauth_request: invalid user admin [preauth]
Sep 18 19:18:47 nativespace-cdp sshd[3620968]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:18:47 nativespace-cdp sshd[3620968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.255.50
Sep 18 19:18:49 nativespace-cdp sshd[3620962]: Failed password for invalid user admin from 187.72.83.169 port 34474 ssh2
Sep 18 19:18:49 nativespace-cdp sshd[3620968]: Failed password for invalid user admin from 156.0.255.50 port 42506 ssh2
Sep 18 19:18:50 nativespace-cdp sshd[3620968]: Received disconnect from 156.0.255.50 port 42506:11: Bye Bye [preauth]
Sep 18 19:18:50 nativespace-cdp sshd[3620968]: Disconnected from 156.0.255.50 port 42506 [preauth]
Sep 18 19:18:50 nativespace-cdp sshd[3620962]: Received disconnect from 187.72.83.169 port 34474:11: Bye Bye [preauth]
Sep 18 19:18:50 nativespace-cdp sshd[3620962]: Disconnected from 187.72.83.169 port 34474 [preauth]
Sep 18 19:19:35 nativespace-cdp sshd[3621098]: Invalid user ubuntu from 156.0.255.50 port 55228
Sep 18 19:19:35 nativespace-cdp sshd[3621098]: input_userauth_request: invalid user ubuntu [preauth]
Sep 18 19:19:35 nativespace-cdp sshd[3621098]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:19:35 nativespace-cdp sshd[3621098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.0.255.50
Sep 18 19:19:36 nativespace-cdp sshd[3621100]: Invalid user demo from 187.72.83.169 port 47112
Sep 18 19:19:36 nativespace-cdp sshd[3621100]: input_userauth_request: invalid user demo [preauth]
Sep 18 19:19:36 nativespace-cdp sshd[3621100]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:19:36 nativespace-cdp sshd[3621100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.83.169
Sep 18 19:19:38 nativespace-cdp sshd[3621098]: Failed password for invalid user ubuntu from 156.0.255.50 port 55228 ssh2
Sep 18 19:19:38 nativespace-cdp sshd[3621098]: Received disconnect from 156.0.255.50 port 55228:11: Bye Bye [preauth]
Sep 18 19:19:38 nativespace-cdp sshd[3621098]: Disconnected from 156.0.255.50 port 55228 [preauth]
Sep 18 19:19:38 nativespace-cdp sshd[3621100]: Failed password for invalid user demo from 187.72.83.169 port 47112 ssh2
Sep 18 19:19:39 nativespace-cdp sshd[3621100]: Received disconnect from 187.72.83.169 port 47112:11: Bye Bye [preauth]
Sep 18 19:19:39 nativespace-cdp sshd[3621100]: Disconnected from 187.72.83.169 port 47112 [preauth]
Sep 18 19:19:54 nativespace-cdp sshd[3621219]: Invalid user frappe from 202.29.222.90 port 33500
Sep 18 19:19:54 nativespace-cdp sshd[3621219]: input_userauth_request: invalid user frappe [preauth]
Sep 18 19:19:54 nativespace-cdp sshd[3621219]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:19:54 nativespace-cdp sshd[3621219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.222.90
Sep 18 19:19:56 nativespace-cdp sshd[3621219]: Failed password for invalid user frappe from 202.29.222.90 port 33500 ssh2
Sep 18 19:19:58 nativespace-cdp sshd[3621219]: Received disconnect from 202.29.222.90 port 33500:11: Bye Bye [preauth]
Sep 18 19:19:58 nativespace-cdp sshd[3621219]: Disconnected from 202.29.222.90 port 33500 [preauth]
Sep 18 19:20:01 nativespace-cdp sshd[3621223]: Invalid user ftptest from 159.89.154.119 port 41212
Sep 18 19:20:01 nativespace-cdp sshd[3621223]: input_userauth_request: invalid user ftptest [preauth]
Sep 18 19:20:01 nativespace-cdp sshd[3621223]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:20:01 nativespace-cdp sshd[3621223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.119
Sep 18 19:20:03 nativespace-cdp sshd[3621223]: Failed password for invalid user ftptest from 159.89.154.119 port 41212 ssh2
Sep 18 19:20:03 nativespace-cdp sshd[3621223]: Received disconnect from 159.89.154.119 port 41212:11: Bye Bye [preauth]
Sep 18 19:20:03 nativespace-cdp sshd[3621223]: Disconnected from 159.89.154.119 port 41212 [preauth]
Sep 18 19:20:17 nativespace-cdp sshd[3621416]: Invalid user ali from 128.199.147.72 port 60686
Sep 18 19:20:17 nativespace-cdp sshd[3621416]: input_userauth_request: invalid user ali [preauth]
Sep 18 19:20:17 nativespace-cdp sshd[3621416]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:20:17 nativespace-cdp sshd[3621416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.147.72
Sep 18 19:20:20 nativespace-cdp sshd[3621416]: Failed password for invalid user ali from 128.199.147.72 port 60686 ssh2
Sep 18 19:20:20 nativespace-cdp sshd[3621416]: Received disconnect from 128.199.147.72 port 60686:11: Bye Bye [preauth]
Sep 18 19:20:20 nativespace-cdp sshd[3621416]: Disconnected from 128.199.147.72 port 60686 [preauth]
Sep 18 19:20:41 nativespace-cdp sshd[3621474]: Invalid user user1 from 159.89.154.119 port 42780
Sep 18 19:20:41 nativespace-cdp sshd[3621474]: input_userauth_request: invalid user user1 [preauth]
Sep 18 19:20:41 nativespace-cdp sshd[3621474]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:20:41 nativespace-cdp sshd[3621474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.119
Sep 18 19:20:43 nativespace-cdp sshd[3621482]: Invalid user postgres from 202.29.222.90 port 40272
Sep 18 19:20:43 nativespace-cdp sshd[3621482]: input_userauth_request: invalid user postgres [preauth]
Sep 18 19:20:43 nativespace-cdp sshd[3621482]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:20:43 nativespace-cdp sshd[3621482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.222.90
Sep 18 19:20:43 nativespace-cdp sshd[3621474]: Failed password for invalid user user1 from 159.89.154.119 port 42780 ssh2
Sep 18 19:20:45 nativespace-cdp sshd[3621482]: Failed password for invalid user postgres from 202.29.222.90 port 40272 ssh2
Sep 18 19:20:47 nativespace-cdp sshd[3621482]: Received disconnect from 202.29.222.90 port 40272:11: Bye Bye [preauth]
Sep 18 19:20:47 nativespace-cdp sshd[3621482]: Disconnected from 202.29.222.90 port 40272 [preauth]
Sep 18 19:20:59 nativespace-cdp sshd[3621605]: Connection closed by 103.181.142.154 port 44774 [preauth]
Sep 18 19:21:11 nativespace-cdp sshd[3621662]: Invalid user guest from 103.139.193.249 port 39772
Sep 18 19:21:11 nativespace-cdp sshd[3621662]: input_userauth_request: invalid user guest [preauth]
Sep 18 19:21:11 nativespace-cdp sshd[3621662]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:21:11 nativespace-cdp sshd[3621662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.193.249
Sep 18 19:21:11 nativespace-cdp sshd[3621665]: Invalid user ftpuser from 128.199.147.72 port 37484
Sep 18 19:21:11 nativespace-cdp sshd[3621665]: input_userauth_request: invalid user ftpuser [preauth]
Sep 18 19:21:11 nativespace-cdp sshd[3621665]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:21:11 nativespace-cdp sshd[3621665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.147.72
Sep 18 19:21:14 nativespace-cdp sshd[3621662]: Failed password for invalid user guest from 103.139.193.249 port 39772 ssh2
Sep 18 19:21:14 nativespace-cdp sshd[3621665]: Failed password for invalid user ftpuser from 128.199.147.72 port 37484 ssh2
Sep 18 19:21:14 nativespace-cdp sshd[3621665]: Received disconnect from 128.199.147.72 port 37484:11: Bye Bye [preauth]
Sep 18 19:21:14 nativespace-cdp sshd[3621665]: Disconnected from 128.199.147.72 port 37484 [preauth]
Sep 18 19:21:14 nativespace-cdp sshd[3621662]: Received disconnect from 103.139.193.249 port 39772:11: Bye Bye [preauth]
Sep 18 19:21:14 nativespace-cdp sshd[3621662]: Disconnected from 103.139.193.249 port 39772 [preauth]
Sep 18 19:21:34 nativespace-cdp sshd[3621839]: Connection closed by 159.100.136.21 port 48710 [preauth]
Sep 18 19:21:58 nativespace-cdp sshd[3621901]: Received disconnect from 103.181.142.154 port 56536:11: Bye Bye [preauth]
Sep 18 19:21:58 nativespace-cdp sshd[3621901]: Disconnected from 103.181.142.154 port 56536 [preauth]
Sep 18 19:22:05 nativespace-cdp sshd[3621954]: Invalid user ftptest from 103.139.193.249 port 52836
Sep 18 19:22:05 nativespace-cdp sshd[3621954]: input_userauth_request: invalid user ftptest [preauth]
Sep 18 19:22:05 nativespace-cdp sshd[3621954]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:22:05 nativespace-cdp sshd[3621954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.193.249
Sep 18 19:22:06 nativespace-cdp sshd[3621959]: Invalid user ftptest from 191.233.25.20 port 1216
Sep 18 19:22:06 nativespace-cdp sshd[3621959]: input_userauth_request: invalid user ftptest [preauth]
Sep 18 19:22:06 nativespace-cdp sshd[3621959]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:22:06 nativespace-cdp sshd[3621959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.25.20
Sep 18 19:22:07 nativespace-cdp sshd[3621954]: Failed password for invalid user ftptest from 103.139.193.249 port 52836 ssh2
Sep 18 19:22:08 nativespace-cdp sshd[3621959]: Failed password for invalid user ftptest from 191.233.25.20 port 1216 ssh2
Sep 18 19:22:11 nativespace-cdp sshd[3621954]: Received disconnect from 103.139.193.249 port 52836:11: Bye Bye [preauth]
Sep 18 19:22:11 nativespace-cdp sshd[3621954]: Disconnected from 103.139.193.249 port 52836 [preauth]
Sep 18 19:22:11 nativespace-cdp sshd[3621959]: Received disconnect from 191.233.25.20 port 1216:11: Bye Bye [preauth]
Sep 18 19:22:11 nativespace-cdp sshd[3621959]: Disconnected from 191.233.25.20 port 1216 [preauth]
Sep 18 19:22:49 nativespace-cdp sshd[3622101]: Invalid user git from 103.181.142.154 port 41152
Sep 18 19:22:49 nativespace-cdp sshd[3622101]: input_userauth_request: invalid user git [preauth]
Sep 18 19:22:49 nativespace-cdp sshd[3622101]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:22:49 nativespace-cdp sshd[3622101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.142.154
Sep 18 19:22:51 nativespace-cdp sshd[3622101]: Failed password for invalid user git from 103.181.142.154 port 41152 ssh2
Sep 18 19:22:51 nativespace-cdp sshd[3622101]: Received disconnect from 103.181.142.154 port 41152:11: Bye Bye [preauth]
Sep 18 19:22:51 nativespace-cdp sshd[3622101]: Disconnected from 103.181.142.154 port 41152 [preauth]
Sep 18 19:22:53 nativespace-cdp sshd[3622113]: Invalid user ftptest from 191.233.25.20 port 1216
Sep 18 19:22:53 nativespace-cdp sshd[3622113]: input_userauth_request: invalid user ftptest [preauth]
Sep 18 19:22:53 nativespace-cdp sshd[3622113]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:22:53 nativespace-cdp sshd[3622113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.25.20
Sep 18 19:22:55 nativespace-cdp sshd[3622113]: Failed password for invalid user ftptest from 191.233.25.20 port 1216 ssh2
Sep 18 19:22:55 nativespace-cdp sshd[3622113]: Received disconnect from 191.233.25.20 port 1216:11: Bye Bye [preauth]
Sep 18 19:22:55 nativespace-cdp sshd[3622113]: Disconnected from 191.233.25.20 port 1216 [preauth]
Sep 18 19:23:44 nativespace-cdp sshd[3622300]: Invalid user user1 from 103.181.142.154 port 43414
Sep 18 19:23:44 nativespace-cdp sshd[3622300]: input_userauth_request: invalid user user1 [preauth]
Sep 18 19:23:44 nativespace-cdp sshd[3622300]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 19:23:44 nativespace-cdp sshd[3622300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.142.154
Sep 18 19:23:46 nativespace-cdp sshd[3622300]: Failed password for invalid user user1 from 103.181.142.154 port 43414 ssh2
Sep 18 19:26:33 nativespace-cdp sshd[3623006]: Connection closed by 159.100.136.21 port 58172 [preauth]
Sep 18 19:31:33 nativespace-cdp sshd[3624340]: Connection closed by 159.100.136.21 port 39270 [preauth]
Sep 18 19:36:33 nativespace-cdp sshd[3626165]: Connection closed by 159.100.136.21 port 48510 [preauth]
Sep 18 19:41:36 nativespace-cdp sshd[3627359]: Connection closed by 159.100.136.21 port 57940 [preauth]
Sep 18 19:46:33 nativespace-cdp sshd[3628288]: Connection closed by 159.100.136.21 port 39268 [preauth]
Sep 18 19:51:33 nativespace-cdp sshd[3629624]: Connection closed by 159.100.136.21 port 47888 [preauth]
Sep 18 19:56:33 nativespace-cdp sshd[3630984]: Connection closed by 159.100.136.21 port 57274 [preauth]
Sep 18 20:01:33 nativespace-cdp sshd[3632212]: Connection closed by 159.100.136.21 port 38578 [preauth]
Sep 18 20:06:35 nativespace-cdp sshd[3633441]: Connection closed by 159.100.136.21 port 48582 [preauth]
Sep 18 20:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 20:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:25 nativespace-cdp sudo[3634119]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 20:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:25 nativespace-cdp sudo[3634123]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 20:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:26 nativespace-cdp sudo[3634128]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 20:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:26 nativespace-cdp sudo[3634135]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 20:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634141]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634159]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634164]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634168]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634173]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634178]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 20:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:28 nativespace-cdp sudo[3634184]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:32 nativespace-cdp sudo[3634213]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:32 nativespace-cdp sudo[3634219]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jennimil user-2=tomandle user-3=david user-4=careers user-5=nbhavers user-6=mcdermos user-7=chrisdal user-8=onlycont user-9=lucy user-10=attlebor user-11=romaldki user-12=branko user-13=ranxterc user-14=hodgsonmail user-15=outdoorc user-16=boldover user-17=nove user-18=crrtipdl user-19=sosevalu user-20=bakery user-21=nvihkvu user-22=havantho user-23=sketchy user-24=cath user-25=what user-26=oubpgvbx user-27=tstardom user-28=design user-29=kategilpin user-30=stagingerris user-31=dancinggardener user-32=ladburyp user-33=sibtoncc user-34=asandcoc user-35=steve user-36=zebrapho user-37=bwppodcast user-38=nsceres user-39=fawcettd user-40=burydropin user-41=dhyana user-42=darkstar user-43=eatspam user-44=beauty user-45=steakbridieme user-46=donnychicago user-47=firstre5 user-48=ctedorgu
Sep 18 20:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=philmcph user-50=lkpier user-51=foods user-52=leftie user-53=fortunaz user-54=health2045 user-55=nscdp user-56=tigerlet user-57=barbersh user-58=nomistakes user-59=hidden user-60=isleofwi user-61=smrszyqg user-62=cwsocial user-63=pugwash user-64=howardon user-65=paulmca1 user-66=reliable user-67=ninejimm user-68=cathski user-69=cambria1 user-70=courseme user-71=eugincou user-72=hirefootballgame user-73=coursemc user-74=opaiscyx user-75=firstres user-76=ultbcrra user-77=seftvta user-78=jonhartl user-79=highlegh user-80=southlon user-81=firstred user-82=costestimatorco user-83=clarkass user-84=firstrel user-85=fetch user-86=carsinyo user-87=hubmaster user-88=elecleis user-89=gilpin user-90=milloyco user-91=thqkgnbz user-92=connectedshoppin user-93=ianrayne user-94=accooper user-95=oneoarco user-96=battlere user-97=vivienn1 user-98=firstre2 user-99=nstriton user-100=brighto1 user-101=bemadonn
Sep 18 20:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=newstoda user-103=belle user-104=ggaaorgu user-105=bedfords user-106=alexadmin user-107=skyfirec user-108=nativene user-109=stuartge user-110=askhform user-111=innovat1 user-112=lbscrmod user-113=maflemin user-114=vantagep user-115=athenare user-116=connect9 user-117=booff user-118=markward user-119=foundation user-120=ulsukarm user-121=theblack user-122=hodgesonweb user-123=spectrum user-124=jarvisin user-125=leereyn1 user-126=stephani user-127=agproduc user-128=still user-129=atestord user-130=sarafoundation user-131=strathar user-132=brmrjxl user-133=lakesan1 user-134=megacards user-135=musorguk user-136=wilsonsw user-137=ptkxhsbt user-138=dickemery123 user-139=martsblo user-140=magichat user-141=hhdugcor user-142=lbhyisi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 20:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:33 nativespace-cdp sudo[3634231]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:33 nativespace-cdp sudo[3634243]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HCrcF62vNcxvhVSc.~
Sep 18 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:33 nativespace-cdp sudo[3634248]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HCrcF62vNcxvhVSc.~'
Sep 18 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:33 nativespace-cdp sudo[3634252]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HCrcF62vNcxvhVSc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:34 nativespace-cdp sudo[3634258]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 20:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:34 nativespace-cdp sudo[3634263]: pam_unix(sudo:session): session closed for user root
Sep 18 20:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 20:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 20:09:35 nativespace-cdp sudo[3634286]: pam_unix(sudo:session): session closed for user root
Sep 18 20:11:35 nativespace-cdp sshd[3635009]: Connection closed by 159.100.136.21 port 57556 [preauth]
Sep 18 20:16:39 nativespace-cdp sshd[3636365]: Connection closed by 159.100.136.21 port 38704 [preauth]
Sep 18 20:21:33 nativespace-cdp sshd[3638329]: Connection closed by 159.100.136.21 port 47496 [preauth]
Sep 18 20:26:35 nativespace-cdp sshd[3639434]: Connection closed by 159.100.136.21 port 55902 [preauth]
Sep 18 20:31:33 nativespace-cdp sshd[3640687]: Connection closed by 159.100.136.21 port 37050 [preauth]
Sep 18 20:36:33 nativespace-cdp sshd[3642325]: Connection closed by 159.100.136.21 port 46858 [preauth]
Sep 18 20:41:33 nativespace-cdp sshd[3643468]: Connection closed by 159.100.136.21 port 56216 [preauth]
Sep 18 20:46:33 nativespace-cdp sshd[3644569]: Connection closed by 159.100.136.21 port 37136 [preauth]
Sep 18 20:51:33 nativespace-cdp sshd[3646329]: Connection closed by 159.100.136.21 port 46856 [preauth]
Sep 18 20:56:33 nativespace-cdp sshd[3647390]: Connection closed by 159.100.136.21 port 56332 [preauth]
Sep 18 21:01:33 nativespace-cdp sshd[3648927]: Connection closed by 159.100.136.21 port 37544 [preauth]
Sep 18 21:06:33 nativespace-cdp sshd[3650630]: Connection closed by 159.100.136.21 port 46694 [preauth]
Sep 18 21:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 21:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:25 nativespace-cdp sudo[3651298]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 21:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:25 nativespace-cdp sudo[3651302]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 21:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:26 nativespace-cdp sudo[3651308]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 21:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:26 nativespace-cdp sudo[3651316]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 21:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651323]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651333]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651338]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651342]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651347]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651352]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 21:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:29 nativespace-cdp sudo[3651358]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 21:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:31 nativespace-cdp sudo[3651372]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 21:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:31 nativespace-cdp sudo[3651381]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=innovat1 user-3=stuartge user-4=askhform user-5=alexadmin user-6=skyfirec user-7=belle user-8=ggaaorgu user-9=newstoda user-10=bemadonn user-11=bedfords user-12=firstre2 user-13=vivienn1 user-14=battlere user-15=oneoarco user-16=brighto1 user-17=nstriton user-18=connectedshoppin user-19=thqkgnbz user-20=accooper user-21=ianrayne user-22=hubmaster user-23=carsinyo user-24=fetch user-25=milloyco user-26=gilpin user-27=elecleis user-28=firstred user-29=southlon user-30=highlegh user-31=firstrel user-32=clarkass user-33=costestimatorco user-34=coursemc user-35=opaiscyx user-36=jonhartl user-37=seftvta user-38=ultbcrra user-39=firstres user-40=magichat user-41=lbhyisi user-42=hhdugcor user-43=dickemery123 user-44=ptkxhsbt user-45=martsblo user-46=musorguk user-47=megacards
Sep 18 21:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=strathar user-50=sarafoundation user-51=atestord user-52=brmrjxl user-53=lakesan1 user-54=stephani user-55=leereyn1 user-56=still user-57=agproduc user-58=spectrum user-59=theblack user-60=hodgesonweb user-61=jarvisin user-62=ulsukarm user-63=connect9 user-64=athenare user-65=vantagep user-66=maflemin user-67=lbscrmod user-68=foundation user-69=markward user-70=booff user-71=design user-72=ladburyp user-73=dancinggardener user-74=stagingerris user-75=kategilpin user-76=sketchy user-77=cath user-78=havantho user-79=nvihkvu user-80=tstardom user-81=oubpgvbx user-82=what user-83=bakery user-84=sosevalu user-85=crrtipdl user-86=boldover user-87=nove user-88=romaldki user-89=hodgsonmail user-90=ranxterc user-91=outdoorc user-92=branko user-93=onlycont user-94=attlebor user-95=lucy user-96=careers user-97=nbhavers user-98=david user-99=chrisdal user-100=mcdermos user-101=jennimil
Sep 18 21:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=eugincou user-104=courseme user-105=hirefootballgame user-106=howardon user-107=pugwash user-108=paulmca1 user-109=cwsocial user-110=cathski user-111=cambria1 user-112=reliable user-113=ninejimm user-114=hidden user-115=nomistakes user-116=barbersh user-117=tigerlet user-118=isleofwi user-119=smrszyqg user-120=lkpier user-121=ctedorgu user-122=philmcph user-123=donnychicago user-124=firstre5 user-125=steakbridieme user-126=nscdp user-127=health2045 user-128=fortunaz user-129=foods user-130=leftie user-131=dhyana user-132=beauty user-133=eatspam user-134=darkstar user-135=nsceres user-136=burydropin user-137=fawcettd user-138=steve user-139=bwppodcast user-140=zebrapho user-141=sibtoncc user-142=asandcoc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 18 21:09:31 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 21:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:32 nativespace-cdp sudo[3651388]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:32 nativespace-cdp sudo[3651395]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FNh8l2lTlfTKJsyx.~
Sep 18 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:32 nativespace-cdp sudo[3651400]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FNh8l2lTlfTKJsyx.~'
Sep 18 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:32 nativespace-cdp sudo[3651404]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FNh8l2lTlfTKJsyx.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:32 nativespace-cdp sudo[3651410]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 21:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:32 nativespace-cdp sudo[3651415]: pam_unix(sudo:session): session closed for user root
Sep 18 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 21:09:51 nativespace-cdp sudo[3651483]: pam_unix(sudo:session): session closed for user root
Sep 18 21:11:33 nativespace-cdp sshd[3651973]: Connection closed by 159.100.136.21 port 56168 [preauth]
Sep 18 21:16:33 nativespace-cdp sshd[3653124]: Connection closed by 159.100.136.21 port 37812 [preauth]
Sep 18 21:21:33 nativespace-cdp sshd[3654362]: Connection closed by 159.100.136.21 port 46154 [preauth]
Sep 18 21:26:34 nativespace-cdp sshd[3655594]: Connection closed by 159.100.136.21 port 54958 [preauth]
Sep 18 21:31:33 nativespace-cdp sshd[3657191]: Connection closed by 159.100.136.21 port 35680 [preauth]
Sep 18 21:36:33 nativespace-cdp sshd[3658973]: Connection closed by 159.100.136.21 port 45360 [preauth]
Sep 18 21:41:33 nativespace-cdp sshd[3660019]: Connection closed by 159.100.136.21 port 53824 [preauth]
Sep 18 21:42:15 nativespace-cdp sshd[3660223]: Invalid user server from 134.209.107.9 port 11100
Sep 18 21:42:15 nativespace-cdp sshd[3660223]: input_userauth_request: invalid user server [preauth]
Sep 18 21:42:15 nativespace-cdp sshd[3660223]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:42:15 nativespace-cdp sshd[3660223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.9
Sep 18 21:42:17 nativespace-cdp sshd[3660223]: Failed password for invalid user server from 134.209.107.9 port 11100 ssh2
Sep 18 21:42:20 nativespace-cdp sshd[3660223]: Received disconnect from 134.209.107.9 port 11100:11: Bye Bye [preauth]
Sep 18 21:42:20 nativespace-cdp sshd[3660223]: Disconnected from 134.209.107.9 port 11100 [preauth]
Sep 18 21:43:06 nativespace-cdp sshd[3660424]: Invalid user testupload from 111.68.108.73 port 47382
Sep 18 21:43:06 nativespace-cdp sshd[3660424]: input_userauth_request: invalid user testupload [preauth]
Sep 18 21:43:06 nativespace-cdp sshd[3660424]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:43:06 nativespace-cdp sshd[3660424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.108.73
Sep 18 21:43:08 nativespace-cdp sshd[3660424]: Failed password for invalid user testupload from 111.68.108.73 port 47382 ssh2
Sep 18 21:43:24 nativespace-cdp sshd[3660461]: Invalid user testupload from 118.194.230.231 port 36950
Sep 18 21:43:24 nativespace-cdp sshd[3660461]: input_userauth_request: invalid user testupload [preauth]
Sep 18 21:43:24 nativespace-cdp sshd[3660461]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:43:24 nativespace-cdp sshd[3660461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.194.230.231
Sep 18 21:43:25 nativespace-cdp sshd[3660461]: Failed password for invalid user testupload from 118.194.230.231 port 36950 ssh2
Sep 18 21:43:26 nativespace-cdp sshd[3660461]: Received disconnect from 118.194.230.231 port 36950:11: Bye Bye [preauth]
Sep 18 21:43:26 nativespace-cdp sshd[3660461]: Disconnected from 118.194.230.231 port 36950 [preauth]
Sep 18 21:43:52 nativespace-cdp sshd[3660424]: Received disconnect from 111.68.108.73 port 47382:11: Bye Bye [preauth]
Sep 18 21:43:52 nativespace-cdp sshd[3660424]: Disconnected from 111.68.108.73 port 47382 [preauth]
Sep 18 21:45:17 nativespace-cdp sshd[3660918]: Invalid user developer from 185.233.37.14 port 58120
Sep 18 21:45:17 nativespace-cdp sshd[3660918]: input_userauth_request: invalid user developer [preauth]
Sep 18 21:45:17 nativespace-cdp sshd[3660918]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:45:17 nativespace-cdp sshd[3660918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.233.37.14
Sep 18 21:45:19 nativespace-cdp sshd[3660918]: Failed password for invalid user developer from 185.233.37.14 port 58120 ssh2
Sep 18 21:45:19 nativespace-cdp sshd[3660918]: Received disconnect from 185.233.37.14 port 58120:11: Bye Bye [preauth]
Sep 18 21:45:19 nativespace-cdp sshd[3660918]: Disconnected from 185.233.37.14 port 58120 [preauth]
Sep 18 21:46:34 nativespace-cdp sshd[3661132]: Connection closed by 159.100.136.21 port 35084 [preauth]
Sep 18 21:48:36 nativespace-cdp sshd[3661604]: Invalid user es from 111.68.108.73 port 43070
Sep 18 21:48:36 nativespace-cdp sshd[3661604]: input_userauth_request: invalid user es [preauth]
Sep 18 21:48:36 nativespace-cdp sshd[3661604]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:48:36 nativespace-cdp sshd[3661604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.108.73
Sep 18 21:48:36 nativespace-cdp sshd[3661601]: Invalid user daniel from 134.209.107.9 port 34204
Sep 18 21:48:36 nativespace-cdp sshd[3661601]: input_userauth_request: invalid user daniel [preauth]
Sep 18 21:48:36 nativespace-cdp sshd[3661601]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:48:36 nativespace-cdp sshd[3661601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.9
Sep 18 21:48:37 nativespace-cdp sshd[3661610]: Invalid user jenkins from 185.233.37.14 port 38112
Sep 18 21:48:37 nativespace-cdp sshd[3661610]: input_userauth_request: invalid user jenkins [preauth]
Sep 18 21:48:37 nativespace-cdp sshd[3661610]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:48:37 nativespace-cdp sshd[3661610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.233.37.14
Sep 18 21:48:39 nativespace-cdp sshd[3661610]: Failed password for invalid user jenkins from 185.233.37.14 port 38112 ssh2
Sep 18 21:48:39 nativespace-cdp sshd[3661610]: Received disconnect from 185.233.37.14 port 38112:11: Bye Bye [preauth]
Sep 18 21:48:39 nativespace-cdp sshd[3661610]: Disconnected from 185.233.37.14 port 38112 [preauth]
Sep 18 21:48:39 nativespace-cdp sshd[3661604]: Failed password for invalid user es from 111.68.108.73 port 43070 ssh2
Sep 18 21:48:39 nativespace-cdp sshd[3661604]: Received disconnect from 111.68.108.73 port 43070:11: Bye Bye [preauth]
Sep 18 21:48:39 nativespace-cdp sshd[3661604]: Disconnected from 111.68.108.73 port 43070 [preauth]
Sep 18 21:48:39 nativespace-cdp sshd[3661601]: Failed password for invalid user daniel from 134.209.107.9 port 34204 ssh2
Sep 18 21:48:39 nativespace-cdp sshd[3661601]: Received disconnect from 134.209.107.9 port 34204:11: Bye Bye [preauth]
Sep 18 21:48:39 nativespace-cdp sshd[3661601]: Disconnected from 134.209.107.9 port 34204 [preauth]
Sep 18 21:48:40 nativespace-cdp sshd[3661618]: Invalid user developer from 118.194.230.231 port 37164
Sep 18 21:48:40 nativespace-cdp sshd[3661618]: input_userauth_request: invalid user developer [preauth]
Sep 18 21:48:40 nativespace-cdp sshd[3661618]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:48:40 nativespace-cdp sshd[3661618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.194.230.231
Sep 18 21:48:42 nativespace-cdp sshd[3661618]: Failed password for invalid user developer from 118.194.230.231 port 37164 ssh2
Sep 18 21:48:42 nativespace-cdp sshd[3661618]: Received disconnect from 118.194.230.231 port 37164:11: Bye Bye [preauth]
Sep 18 21:48:42 nativespace-cdp sshd[3661618]: Disconnected from 118.194.230.231 port 37164 [preauth]
Sep 18 21:49:16 nativespace-cdp sshd[3661724]: Invalid user testupload from 185.233.37.14 port 39378
Sep 18 21:49:16 nativespace-cdp sshd[3661724]: input_userauth_request: invalid user testupload [preauth]
Sep 18 21:49:16 nativespace-cdp sshd[3661724]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:49:16 nativespace-cdp sshd[3661724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.233.37.14
Sep 18 21:49:18 nativespace-cdp sshd[3661724]: Failed password for invalid user testupload from 185.233.37.14 port 39378 ssh2
Sep 18 21:49:18 nativespace-cdp sshd[3661724]: Received disconnect from 185.233.37.14 port 39378:11: Bye Bye [preauth]
Sep 18 21:49:18 nativespace-cdp sshd[3661724]: Disconnected from 185.233.37.14 port 39378 [preauth]
Sep 18 21:49:18 nativespace-cdp sshd[3661734]: Invalid user debian from 134.209.107.9 port 50368
Sep 18 21:49:18 nativespace-cdp sshd[3661734]: input_userauth_request: invalid user debian [preauth]
Sep 18 21:49:18 nativespace-cdp sshd[3661734]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:49:18 nativespace-cdp sshd[3661734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.9
Sep 18 21:49:20 nativespace-cdp sshd[3661734]: Failed password for invalid user debian from 134.209.107.9 port 50368 ssh2
Sep 18 21:49:21 nativespace-cdp sshd[3661734]: Received disconnect from 134.209.107.9 port 50368:11: Bye Bye [preauth]
Sep 18 21:49:21 nativespace-cdp sshd[3661734]: Disconnected from 134.209.107.9 port 50368 [preauth]
Sep 18 21:49:22 nativespace-cdp sshd[3661776]: Invalid user jenkins from 111.68.108.73 port 55872
Sep 18 21:49:22 nativespace-cdp sshd[3661776]: input_userauth_request: invalid user jenkins [preauth]
Sep 18 21:49:22 nativespace-cdp sshd[3661776]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:49:22 nativespace-cdp sshd[3661776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.108.73
Sep 18 21:49:24 nativespace-cdp sshd[3661776]: Failed password for invalid user jenkins from 111.68.108.73 port 55872 ssh2
Sep 18 21:49:27 nativespace-cdp sshd[3661776]: Received disconnect from 111.68.108.73 port 55872:11: Bye Bye [preauth]
Sep 18 21:49:27 nativespace-cdp sshd[3661776]: Disconnected from 111.68.108.73 port 55872 [preauth]
Sep 18 21:49:29 nativespace-cdp sshd[3661798]: Invalid user es from 118.194.230.231 port 37226
Sep 18 21:49:29 nativespace-cdp sshd[3661798]: input_userauth_request: invalid user es [preauth]
Sep 18 21:49:29 nativespace-cdp sshd[3661798]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 21:49:29 nativespace-cdp sshd[3661798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.194.230.231
Sep 18 21:49:31 nativespace-cdp sshd[3661798]: Failed password for invalid user es from 118.194.230.231 port 37226 ssh2
Sep 18 21:49:31 nativespace-cdp sshd[3661798]: Received disconnect from 118.194.230.231 port 37226:11: Bye Bye [preauth]
Sep 18 21:49:31 nativespace-cdp sshd[3661798]: Disconnected from 118.194.230.231 port 37226 [preauth]
Sep 18 21:51:33 nativespace-cdp sshd[3662362]: Connection closed by 159.100.136.21 port 44462 [preauth]
Sep 18 21:56:36 nativespace-cdp sshd[3663708]: Connection closed by 159.100.136.21 port 53492 [preauth]
Sep 18 22:01:35 nativespace-cdp sshd[3665213]: Connection closed by 159.100.136.21 port 34616 [preauth]
Sep 18 22:06:34 nativespace-cdp sshd[3666474]: Connection closed by 159.100.136.21 port 43636 [preauth]
Sep 18 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:28 nativespace-cdp sudo[3667430]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:28 nativespace-cdp sudo[3667434]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:29 nativespace-cdp sudo[3667439]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 22:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:29 nativespace-cdp sudo[3667448]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 22:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667454]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667468]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667474]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667478]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667484]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667490]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:33 nativespace-cdp sudo[3667495]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:40 nativespace-cdp sudo[3667524]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 22:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:41 nativespace-cdp sudo[3667531]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstrel user-2=clarkass user-3=costestimatorco user-4=firstred user-5=highlegh user-6=southlon user-7=ultbcrra user-8=seftvta user-9=jonhartl user-10=firstres user-11=coursemc user-12=opaiscyx user-13=accooper user-14=ianrayne user-15=connectedshoppin user-16=thqkgnbz user-17=gilpin user-18=milloyco user-19=elecleis user-20=hubmaster user-21=fetch user-22=carsinyo user-23=bedfords user-24=newstoda user-25=ggaaorgu user-26=belle user-27=bemadonn user-28=nstriton user-29=brighto1 user-30=vivienn1 user-31=firstre2 user-32=oneoarco user-33=battlere user-34=innovat1 user-35=askhform user-36=stuartge user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=markward user-42=booff user-43=foundation user-44=vantagep user-45=connect9 user-46=athenare user-47=lbscrmod user-48=maflemin
Sep 18 22:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=stephani user-52=leereyn1 user-53=jarvisin user-54=spectrum user-55=theblack user-56=hodgesonweb user-57=wilsonsw user-58=megacards user-59=musorguk user-60=lakesan1 user-61=brmrjxl user-62=strathar user-63=atestord user-64=sarafoundation user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=dickemery123 user-70=ptkxhsbt user-71=chrisdal user-72=mcdermos user-73=david user-74=careers user-75=nbhavers user-76=tomandle user-77=jennimil user-78=hodgsonmail user-79=ranxterc user-80=outdoorc user-81=branko user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=bakery user-87=crrtipdl user-88=sosevalu user-89=nove user-90=boldover user-91=dancinggardener user-92=stagingerris user-93=ladburyp user-94=kategilpin user-95=design user-96=tstardom user-97=oubpgvbx user-98=what user-99=havantho user-100=sketchy user-101=cath user-102=nvihkvu
Sep 18 22:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=bwppodcast user-104=zebrapho user-105=steve user-106=sibtoncc user-107=asandcoc user-108=beauty user-109=darkstar user-110=eatspam user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=smrszyqg user-116=isleofwi user-117=nomistakes user-118=hidden user-119=barbersh user-120=tigerlet user-121=nscdp user-122=foods user-123=leftie user-124=health2045 user-125=fortunaz user-126=lkpier user-127=firstre5 user-128=donnychicago user-129=steakbridieme user-130=ctedorgu user-131=philmcph user-132=hirefootballgame user-133=eugincou user-134=courseme user-135=cathski user-136=cambria1 user-137=reliable user-138=ninejimm user-139=cwsocial user-140=paulmca1 user-141=howardon user-142=pugwash feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 22:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 22:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:42 nativespace-cdp sudo[3667537]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 22:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:42 nativespace-cdp sudo[3667547]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-So9YLSV0w3387dH3.~
Sep 18 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:43 nativespace-cdp sudo[3667552]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-So9YLSV0w3387dH3.~'
Sep 18 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:43 nativespace-cdp sudo[3667556]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-So9YLSV0w3387dH3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:43 nativespace-cdp sudo[3667562]: pam_unix(sudo:session): session closed for user root
Sep 18 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:09:43 nativespace-cdp sudo[3667567]: pam_unix(sudo:session): session closed for user root
Sep 18 22:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 22:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 22:10:05 nativespace-cdp sudo[3667757]: pam_unix(sudo:session): session closed for user root
Sep 18 22:11:33 nativespace-cdp sshd[3668038]: Connection closed by 159.100.136.21 port 52792 [preauth]
Sep 18 22:16:33 nativespace-cdp sshd[3669617]: Connection closed by 159.100.136.21 port 33584 [preauth]
Sep 18 22:21:33 nativespace-cdp sshd[3671315]: Connection closed by 159.100.136.21 port 42570 [preauth]
Sep 18 22:26:34 nativespace-cdp sshd[3672350]: Connection closed by 159.100.136.21 port 51906 [preauth]
Sep 18 22:31:33 nativespace-cdp sshd[3673457]: Connection closed by 159.100.136.21 port 33002 [preauth]
Sep 18 22:36:33 nativespace-cdp sshd[3674985]: Connection closed by 159.100.136.21 port 42856 [preauth]
Sep 18 22:41:33 nativespace-cdp sshd[3676427]: Connection closed by 159.100.136.21 port 51846 [preauth]
Sep 18 22:46:35 nativespace-cdp sshd[3677434]: Connection closed by 159.100.136.21 port 60550 [preauth]
Sep 18 22:51:33 nativespace-cdp sshd[3678711]: Connection closed by 159.100.136.21 port 41684 [preauth]
Sep 18 22:56:34 nativespace-cdp sshd[3679904]: Connection closed by 159.100.136.21 port 51320 [preauth]
Sep 18 23:01:33 nativespace-cdp sshd[3681274]: Connection closed by 159.100.136.21 port 60642 [preauth]
Sep 18 23:06:36 nativespace-cdp sshd[3682985]: Connection closed by 159.100.136.21 port 42012 [preauth]
Sep 18 23:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 18 23:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:21 nativespace-cdp sudo[3683689]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 18 23:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:21 nativespace-cdp sudo[3683694]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 18 23:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:22 nativespace-cdp sudo[3683699]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 18 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:22 nativespace-cdp sudo[3683705]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 18 23:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683711]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 18 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683723]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 18 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683727]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 18 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683732]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 18 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683738]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 18 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683743]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 18 23:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:23 nativespace-cdp sudo[3683749]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 18 23:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:34 nativespace-cdp sudo[3683787]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 18 23:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:34 nativespace-cdp sudo[3683794]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cathski user-2=cambria1 user-3=ninejimm user-4=reliable user-5=cwsocial user-6=pugwash user-7=howardon user-8=paulmca1 user-9=hirefootballgame user-10=eugincou user-11=courseme user-12=nscdp user-13=foods user-14=leftie user-15=health2045 user-16=fortunaz user-17=lkpier user-18=donnychicago user-19=firstre5 user-20=steakbridieme user-21=ctedorgu user-22=philmcph user-23=isleofwi user-24=smrszyqg user-25=nomistakes user-26=hidden user-27=barbersh user-28=tigerlet user-29=fawcettd user-30=burydropin user-31=nsceres user-32=beauty user-33=darkstar user-34=eatspam user-35=dhyana user-36=asandcoc user-37=sibtoncc user-38=bwppodcast user-39=zebrapho user-40=steve user-41=oubpgvbx user-42=tstardom user-43=what user-44=havantho user-45=cath user-46=sketchy user-47=nvihkvu user-48=stagingerris
Sep 18 23:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=dancinggardener user-50=ladburyp user-51=kategilpin user-52=design user-53=nove user-54=boldover user-55=bakery user-56=crrtipdl user-57=sosevalu user-58=lucy user-59=attlebor user-60=onlycont user-61=ranxterc user-62=hodgsonmail user-63=outdoorc user-64=branko user-65=romaldki user-66=tomandle user-67=jennimil user-68=chrisdal user-69=mcdermos user-70=david user-71=careers user-72=nbhavers user-73=martsblo user-74=dickemery123 user-75=ptkxhsbt user-76=hhdugcor user-77=lbhyisi user-78=magichat user-79=lakesan1 user-80=brmrjxl user-81=strathar user-82=atestord user-83=sarafoundation user-84=wilsonsw user-85=megacards user-86=musorguk user-87=jarvisin user-88=spectrum user-89=theblack user-90=hodgesonweb user-91=agproduc user-92=still user-93=stephani user-94=leereyn1 user-95=markward user-96=booff user-97=foundation user-98=vantagep user-99=connect9 user-100=athenare user-101=lbscrmod user-102=maflemin
Sep 18 23:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=innovat1 user-107=askhform user-108=stuartge user-109=nativene user-110=nstriton user-111=brighto1 user-112=vivienn1 user-113=firstre2 user-114=oneoarco user-115=battlere user-116=bedfords user-117=newstoda user-118=ggaaorgu user-119=belle user-120=bemadonn user-121=milloyco user-122=gilpin user-123=elecleis user-124=hubmaster user-125=fetch user-126=carsinyo user-127=accooper user-128=ianrayne user-129=connectedshoppin user-130=thqkgnbz user-131=ultbcrra user-132=jonhartl user-133=seftvta user-134=firstres user-135=coursemc user-136=opaiscyx user-137=clarkass user-138=firstrel user-139=costestimatorco user-140=firstred user-141=highlegh user-142=southlon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 18 23:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 18 23:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:35 nativespace-cdp sudo[3683802]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 23:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:35 nativespace-cdp sudo[3683809]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-F4DzoDtIR0E07p9N.~
Sep 18 23:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:35 nativespace-cdp sudo[3683814]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-F4DzoDtIR0E07p9N.~'
Sep 18 23:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:35 nativespace-cdp sudo[3683818]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-F4DzoDtIR0E07p9N.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 18 23:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:35 nativespace-cdp sudo[3683824]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 18 23:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:35 nativespace-cdp sudo[3683829]: pam_unix(sudo:session): session closed for user root
Sep 18 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 18 23:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 18 23:09:42 nativespace-cdp sudo[3683868]: pam_unix(sudo:session): session closed for user root
Sep 18 23:11:33 nativespace-cdp sshd[3684302]: Connection closed by 159.100.136.21 port 50570 [preauth]
Sep 18 23:16:34 nativespace-cdp sshd[3685354]: Connection closed by 159.100.136.21 port 59274 [preauth]
Sep 18 23:21:33 nativespace-cdp sshd[3687089]: Connection closed by 159.100.136.21 port 39808 [preauth]
Sep 18 23:26:33 nativespace-cdp sshd[3688241]: Connection closed by 159.100.136.21 port 48104 [preauth]
Sep 18 23:31:36 nativespace-cdp sshd[3689347]: Connection closed by 159.100.136.21 port 57130 [preauth]
Sep 18 23:36:36 nativespace-cdp sshd[3690896]: Connection closed by 159.100.136.21 port 38440 [preauth]
Sep 18 23:41:33 nativespace-cdp sshd[3691994]: Connection closed by 159.100.136.21 port 47558 [preauth]
Sep 18 23:43:48 nativespace-cdp sshd[3692421]: Invalid user shareuser from 52.161.137.151 port 51316
Sep 18 23:43:48 nativespace-cdp sshd[3692421]: input_userauth_request: invalid user shareuser [preauth]
Sep 18 23:43:48 nativespace-cdp sshd[3692421]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:43:48 nativespace-cdp sshd[3692421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.151
Sep 18 23:43:50 nativespace-cdp sshd[3692421]: Failed password for invalid user shareuser from 52.161.137.151 port 51316 ssh2
Sep 18 23:43:50 nativespace-cdp sshd[3692421]: Received disconnect from 52.161.137.151 port 51316:11: Bye Bye [preauth]
Sep 18 23:43:50 nativespace-cdp sshd[3692421]: Disconnected from 52.161.137.151 port 51316 [preauth]
Sep 18 23:44:06 nativespace-cdp sshd[3692194]: Connection reset by 185.217.131.229 port 49096 [preauth]
Sep 18 23:44:27 nativespace-cdp sshd[3692530]: Invalid user rstudio from 42.96.19.234 port 49902
Sep 18 23:44:27 nativespace-cdp sshd[3692530]: input_userauth_request: invalid user rstudio [preauth]
Sep 18 23:44:27 nativespace-cdp sshd[3692530]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:44:27 nativespace-cdp sshd[3692530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.19.234
Sep 18 23:44:29 nativespace-cdp sshd[3692530]: Failed password for invalid user rstudio from 42.96.19.234 port 49902 ssh2
Sep 18 23:44:29 nativespace-cdp sshd[3692530]: Received disconnect from 42.96.19.234 port 49902:11: Bye Bye [preauth]
Sep 18 23:44:29 nativespace-cdp sshd[3692530]: Disconnected from 42.96.19.234 port 49902 [preauth]
Sep 18 23:44:35 nativespace-cdp sshd[3692544]: Invalid user go from 187.137.168.13 port 27199
Sep 18 23:44:35 nativespace-cdp sshd[3692544]: input_userauth_request: invalid user go [preauth]
Sep 18 23:44:35 nativespace-cdp sshd[3692544]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:44:35 nativespace-cdp sshd[3692544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.137.168.13
Sep 18 23:44:37 nativespace-cdp sshd[3692544]: Failed password for invalid user go from 187.137.168.13 port 27199 ssh2
Sep 18 23:44:37 nativespace-cdp sshd[3692544]: Received disconnect from 187.137.168.13 port 27199:11: Bye Bye [preauth]
Sep 18 23:44:37 nativespace-cdp sshd[3692544]: Disconnected from 187.137.168.13 port 27199 [preauth]
Sep 18 23:45:33 nativespace-cdp sshd[3692837]: Invalid user kenneth from 202.90.159.68 port 33118
Sep 18 23:45:33 nativespace-cdp sshd[3692837]: input_userauth_request: invalid user kenneth [preauth]
Sep 18 23:45:33 nativespace-cdp sshd[3692837]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:45:33 nativespace-cdp sshd[3692837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.159.68
Sep 18 23:45:35 nativespace-cdp sshd[3692894]: Invalid user tiptop from 103.159.133.96 port 52462
Sep 18 23:45:35 nativespace-cdp sshd[3692894]: input_userauth_request: invalid user tiptop [preauth]
Sep 18 23:45:35 nativespace-cdp sshd[3692894]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:45:35 nativespace-cdp sshd[3692894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.159.133.96
Sep 18 23:45:35 nativespace-cdp sshd[3692837]: Failed password for invalid user kenneth from 202.90.159.68 port 33118 ssh2
Sep 18 23:45:35 nativespace-cdp sshd[3692837]: Received disconnect from 202.90.159.68 port 33118:11: Bye Bye [preauth]
Sep 18 23:45:35 nativespace-cdp sshd[3692837]: Disconnected from 202.90.159.68 port 33118 [preauth]
Sep 18 23:45:37 nativespace-cdp sshd[3692894]: Failed password for invalid user tiptop from 103.159.133.96 port 52462 ssh2
Sep 18 23:45:37 nativespace-cdp sshd[3692894]: Received disconnect from 103.159.133.96 port 52462:11: Bye Bye [preauth]
Sep 18 23:45:37 nativespace-cdp sshd[3692894]: Disconnected from 103.159.133.96 port 52462 [preauth]
Sep 18 23:46:34 nativespace-cdp sshd[3693054]: Connection closed by 159.100.136.21 port 57320 [preauth]
Sep 18 23:46:36 nativespace-cdp sshd[3693061]: Invalid user sade from 152.42.245.17 port 60302
Sep 18 23:46:36 nativespace-cdp sshd[3693061]: input_userauth_request: invalid user sade [preauth]
Sep 18 23:46:36 nativespace-cdp sshd[3693061]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:46:36 nativespace-cdp sshd[3693061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.245.17
Sep 18 23:46:38 nativespace-cdp sshd[3693061]: Failed password for invalid user sade from 152.42.245.17 port 60302 ssh2
Sep 18 23:46:38 nativespace-cdp sshd[3693061]: Received disconnect from 152.42.245.17 port 60302:11: Bye Bye [preauth]
Sep 18 23:46:38 nativespace-cdp sshd[3693061]: Disconnected from 152.42.245.17 port 60302 [preauth]
Sep 18 23:47:53 nativespace-cdp sshd[3693354]: Invalid user go from 192.3.248.137 port 42156
Sep 18 23:47:53 nativespace-cdp sshd[3693354]: input_userauth_request: invalid user go [preauth]
Sep 18 23:47:53 nativespace-cdp sshd[3693354]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:47:53 nativespace-cdp sshd[3693354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.248.137
Sep 18 23:47:54 nativespace-cdp sshd[3693354]: Failed password for invalid user go from 192.3.248.137 port 42156 ssh2
Sep 18 23:47:55 nativespace-cdp sshd[3693354]: Received disconnect from 192.3.248.137 port 42156:11: Bye Bye [preauth]
Sep 18 23:47:55 nativespace-cdp sshd[3693354]: Disconnected from 192.3.248.137 port 42156 [preauth]
Sep 18 23:49:15 nativespace-cdp sshd[3694073]: Received disconnect from 52.161.137.151 port 59808:11: Bye Bye [preauth]
Sep 18 23:49:15 nativespace-cdp sshd[3694073]: Disconnected from 52.161.137.151 port 59808 [preauth]
Sep 18 23:49:16 nativespace-cdp sshd[3694083]: Invalid user go from 103.159.133.96 port 33578
Sep 18 23:49:16 nativespace-cdp sshd[3694083]: input_userauth_request: invalid user go [preauth]
Sep 18 23:49:16 nativespace-cdp sshd[3694083]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:16 nativespace-cdp sshd[3694083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.159.133.96
Sep 18 23:49:17 nativespace-cdp sshd[3694083]: Failed password for invalid user go from 103.159.133.96 port 33578 ssh2
Sep 18 23:49:17 nativespace-cdp sshd[3694083]: Received disconnect from 103.159.133.96 port 33578:11: Bye Bye [preauth]
Sep 18 23:49:17 nativespace-cdp sshd[3694083]: Disconnected from 103.159.133.96 port 33578 [preauth]
Sep 18 23:49:18 nativespace-cdp sshd[3694100]: Invalid user sade from 42.96.19.234 port 33972
Sep 18 23:49:18 nativespace-cdp sshd[3694100]: input_userauth_request: invalid user sade [preauth]
Sep 18 23:49:18 nativespace-cdp sshd[3694100]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:18 nativespace-cdp sshd[3694100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.19.234
Sep 18 23:49:21 nativespace-cdp sshd[3694100]: Failed password for invalid user sade from 42.96.19.234 port 33972 ssh2
Sep 18 23:49:23 nativespace-cdp sshd[3694100]: Received disconnect from 42.96.19.234 port 33972:11: Bye Bye [preauth]
Sep 18 23:49:23 nativespace-cdp sshd[3694100]: Disconnected from 42.96.19.234 port 33972 [preauth]
Sep 18 23:49:24 nativespace-cdp sshd[3694111]: Invalid user tiptop from 192.3.248.137 port 48422
Sep 18 23:49:24 nativespace-cdp sshd[3694111]: input_userauth_request: invalid user tiptop [preauth]
Sep 18 23:49:24 nativespace-cdp sshd[3694111]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:24 nativespace-cdp sshd[3694111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.248.137
Sep 18 23:49:25 nativespace-cdp sshd[3694111]: Failed password for invalid user tiptop from 192.3.248.137 port 48422 ssh2
Sep 18 23:49:25 nativespace-cdp sshd[3694111]: Received disconnect from 192.3.248.137 port 48422:11: Bye Bye [preauth]
Sep 18 23:49:25 nativespace-cdp sshd[3694111]: Disconnected from 192.3.248.137 port 48422 [preauth]
Sep 18 23:49:27 nativespace-cdp sshd[3694119]: Invalid user sade from 202.90.159.68 port 44032
Sep 18 23:49:27 nativespace-cdp sshd[3694119]: input_userauth_request: invalid user sade [preauth]
Sep 18 23:49:27 nativespace-cdp sshd[3694119]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:27 nativespace-cdp sshd[3694119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.159.68
Sep 18 23:49:29 nativespace-cdp sshd[3694119]: Failed password for invalid user sade from 202.90.159.68 port 44032 ssh2
Sep 18 23:49:29 nativespace-cdp sshd[3694119]: Received disconnect from 202.90.159.68 port 44032:11: Bye Bye [preauth]
Sep 18 23:49:29 nativespace-cdp sshd[3694119]: Disconnected from 202.90.159.68 port 44032 [preauth]
Sep 18 23:49:31 nativespace-cdp sshd[3694131]: Invalid user kenneth from 152.42.245.17 port 58086
Sep 18 23:49:31 nativespace-cdp sshd[3694131]: input_userauth_request: invalid user kenneth [preauth]
Sep 18 23:49:31 nativespace-cdp sshd[3694131]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:31 nativespace-cdp sshd[3694131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.245.17
Sep 18 23:49:33 nativespace-cdp sshd[3694131]: Failed password for invalid user kenneth from 152.42.245.17 port 58086 ssh2
Sep 18 23:49:33 nativespace-cdp sshd[3694131]: Received disconnect from 152.42.245.17 port 58086:11: Bye Bye [preauth]
Sep 18 23:49:33 nativespace-cdp sshd[3694131]: Disconnected from 152.42.245.17 port 58086 [preauth]
Sep 18 23:49:50 nativespace-cdp sshd[3694173]: Invalid user www from 52.161.137.151 port 53152
Sep 18 23:49:50 nativespace-cdp sshd[3694173]: input_userauth_request: invalid user www [preauth]
Sep 18 23:49:50 nativespace-cdp sshd[3694173]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:50 nativespace-cdp sshd[3694173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.151
Sep 18 23:49:52 nativespace-cdp sshd[3694173]: Failed password for invalid user www from 52.161.137.151 port 53152 ssh2
Sep 18 23:49:52 nativespace-cdp sshd[3694173]: Received disconnect from 52.161.137.151 port 53152:11: Bye Bye [preauth]
Sep 18 23:49:52 nativespace-cdp sshd[3694173]: Disconnected from 52.161.137.151 port 53152 [preauth]
Sep 18 23:49:59 nativespace-cdp sshd[3694200]: Invalid user sade from 103.159.133.96 port 46376
Sep 18 23:49:59 nativespace-cdp sshd[3694200]: input_userauth_request: invalid user sade [preauth]
Sep 18 23:49:59 nativespace-cdp sshd[3694200]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:49:59 nativespace-cdp sshd[3694200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.159.133.96
Sep 18 23:50:00 nativespace-cdp sshd[3694200]: Failed password for invalid user sade from 103.159.133.96 port 46376 ssh2
Sep 18 23:50:02 nativespace-cdp sshd[3694200]: Received disconnect from 103.159.133.96 port 46376:11: Bye Bye [preauth]
Sep 18 23:50:02 nativespace-cdp sshd[3694200]: Disconnected from 103.159.133.96 port 46376 [preauth]
Sep 18 23:50:05 nativespace-cdp sshd[3694331]: Invalid user dck from 192.3.248.137 port 55198
Sep 18 23:50:05 nativespace-cdp sshd[3694331]: input_userauth_request: invalid user dck [preauth]
Sep 18 23:50:05 nativespace-cdp sshd[3694331]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:50:05 nativespace-cdp sshd[3694331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.248.137
Sep 18 23:50:06 nativespace-cdp sshd[3694356]: Invalid user go from 42.96.19.234 port 43642
Sep 18 23:50:06 nativespace-cdp sshd[3694356]: input_userauth_request: invalid user go [preauth]
Sep 18 23:50:06 nativespace-cdp sshd[3694356]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:50:06 nativespace-cdp sshd[3694356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.19.234
Sep 18 23:50:07 nativespace-cdp sshd[3694331]: Failed password for invalid user dck from 192.3.248.137 port 55198 ssh2
Sep 18 23:50:08 nativespace-cdp sshd[3694356]: Failed password for invalid user go from 42.96.19.234 port 43642 ssh2
Sep 18 23:50:08 nativespace-cdp sshd[3694356]: Received disconnect from 42.96.19.234 port 43642:11: Bye Bye [preauth]
Sep 18 23:50:08 nativespace-cdp sshd[3694356]: Disconnected from 42.96.19.234 port 43642 [preauth]
Sep 18 23:50:16 nativespace-cdp sshd[3694452]: Invalid user rstudio from 152.42.245.17 port 52742
Sep 18 23:50:16 nativespace-cdp sshd[3694452]: input_userauth_request: invalid user rstudio [preauth]
Sep 18 23:50:16 nativespace-cdp sshd[3694452]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:50:16 nativespace-cdp sshd[3694452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.245.17
Sep 18 23:50:17 nativespace-cdp sshd[3694457]: Invalid user go from 202.90.159.68 port 56780
Sep 18 23:50:17 nativespace-cdp sshd[3694457]: input_userauth_request: invalid user go [preauth]
Sep 18 23:50:17 nativespace-cdp sshd[3694457]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:50:17 nativespace-cdp sshd[3694457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.159.68
Sep 18 23:50:18 nativespace-cdp sshd[3694452]: Failed password for invalid user rstudio from 152.42.245.17 port 52742 ssh2
Sep 18 23:50:18 nativespace-cdp sshd[3694452]: Received disconnect from 152.42.245.17 port 52742:11: Bye Bye [preauth]
Sep 18 23:50:18 nativespace-cdp sshd[3694452]: Disconnected from 152.42.245.17 port 52742 [preauth]
Sep 18 23:50:20 nativespace-cdp sshd[3694457]: Failed password for invalid user go from 202.90.159.68 port 56780 ssh2
Sep 18 23:50:20 nativespace-cdp sshd[3694457]: Received disconnect from 202.90.159.68 port 56780:11: Bye Bye [preauth]
Sep 18 23:50:20 nativespace-cdp sshd[3694457]: Disconnected from 202.90.159.68 port 56780 [preauth]
Sep 18 23:50:27 nativespace-cdp sshd[3694574]: Invalid user newtest from 52.161.137.151 port 48850
Sep 18 23:50:27 nativespace-cdp sshd[3694574]: input_userauth_request: invalid user newtest [preauth]
Sep 18 23:50:27 nativespace-cdp sshd[3694574]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:50:27 nativespace-cdp sshd[3694574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.137.151
Sep 18 23:50:29 nativespace-cdp sshd[3694574]: Failed password for invalid user newtest from 52.161.137.151 port 48850 ssh2
Sep 18 23:50:29 nativespace-cdp sshd[3694574]: Received disconnect from 52.161.137.151 port 48850:11: Bye Bye [preauth]
Sep 18 23:50:29 nativespace-cdp sshd[3694574]: Disconnected from 52.161.137.151 port 48850 [preauth]
Sep 18 23:51:32 nativespace-cdp sshd[3694797]: Invalid user tiptop from 187.137.168.13 port 37646
Sep 18 23:51:32 nativespace-cdp sshd[3694797]: input_userauth_request: invalid user tiptop [preauth]
Sep 18 23:51:32 nativespace-cdp sshd[3694797]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:51:32 nativespace-cdp sshd[3694797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.137.168.13
Sep 18 23:51:33 nativespace-cdp sshd[3694805]: Connection closed by 159.100.136.21 port 38200 [preauth]
Sep 18 23:51:34 nativespace-cdp sshd[3694797]: Failed password for invalid user tiptop from 187.137.168.13 port 37646 ssh2
Sep 18 23:51:34 nativespace-cdp sshd[3694797]: Received disconnect from 187.137.168.13 port 37646:11: Bye Bye [preauth]
Sep 18 23:51:34 nativespace-cdp sshd[3694797]: Disconnected from 187.137.168.13 port 37646 [preauth]
Sep 18 23:52:16 nativespace-cdp sshd[3694923]: Invalid user dck from 187.137.168.13 port 13096
Sep 18 23:52:16 nativespace-cdp sshd[3694923]: input_userauth_request: invalid user dck [preauth]
Sep 18 23:52:16 nativespace-cdp sshd[3694923]: pam_unix(sshd:auth): check pass; user unknown
Sep 18 23:52:16 nativespace-cdp sshd[3694923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.137.168.13
Sep 18 23:52:19 nativespace-cdp sshd[3694923]: Failed password for invalid user dck from 187.137.168.13 port 13096 ssh2
Sep 18 23:52:19 nativespace-cdp sshd[3694923]: Received disconnect from 187.137.168.13 port 13096:11: Bye Bye [preauth]
Sep 18 23:52:19 nativespace-cdp sshd[3694923]: Disconnected from 187.137.168.13 port 13096 [preauth]
Sep 18 23:56:33 nativespace-cdp sshd[3695893]: Connection closed by 159.100.136.21 port 47782 [preauth]
Sep 19 00:01:33 nativespace-cdp sshd[3697097]: Connection closed by 159.100.136.21 port 57310 [preauth]
Sep 19 00:06:33 nativespace-cdp sshd[3698518]: Connection closed by 159.100.136.21 port 38550 [preauth]
Sep 19 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:26 nativespace-cdp sudo[3699181]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:26 nativespace-cdp sudo[3699185]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:26 nativespace-cdp sudo[3699190]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:26 nativespace-cdp sudo[3699197]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699203]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699212]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699217]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699221]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699226]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699231]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:28 nativespace-cdp sudo[3699237]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:30 nativespace-cdp sudo[3699254]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:30 nativespace-cdp sudo[3699260]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tomandle user-2=jennimil user-3=mcdermos user-4=chrisdal user-5=careers user-6=nbhavers user-7=david user-8=attlebor user-9=lucy user-10=onlycont user-11=branko user-12=ranxterc user-13=outdoorc user-14=hodgsonmail user-15=romaldki user-16=nove user-17=boldover user-18=sosevalu user-19=crrtipdl user-20=bakery user-21=what user-22=tstardom user-23=oubpgvbx user-24=nvihkvu user-25=cath user-26=sketchy user-27=havantho user-28=kategilpin user-29=ladburyp user-30=stagingerris user-31=dancinggardener user-32=design user-33=sibtoncc user-34=asandcoc user-35=zebrapho user-36=bwppodcast user-37=steve user-38=burydropin user-39=fawcettd user-40=nsceres user-41=eatspam user-42=darkstar user-43=beauty user-44=dhyana user-45=fortunaz user-46=health2045 user-47=foods user-48=leftie user-49=nscdp
Sep 19 00:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=ctedorgu user-51=philmcph user-52=donnychicago user-53=firstre5 user-54=steakbridieme user-55=lkpier user-56=smrszyqg user-57=isleofwi user-58=barbersh user-59=tigerlet user-60=hidden user-61=nomistakes user-62=reliable user-63=ninejimm user-64=cambria1 user-65=cathski user-66=paulmca1 user-67=howardon user-68=pugwash user-69=cwsocial user-70=hirefootballgame user-71=courseme user-72=eugincou user-73=firstres user-74=jonhartl user-75=seftvta user-76=ultbcrra user-77=opaiscyx user-78=coursemc user-79=costestimatorco user-80=firstrel user-81=clarkass user-82=southlon user-83=highlegh user-84=firstred user-85=elecleis user-86=gilpin user-87=milloyco user-88=carsinyo user-89=fetch user-90=hubmaster user-91=ianrayne user-92=accooper user-93=thqkgnbz user-94=connectedshoppin user-95=brighto1 user-96=nstriton user-97=battlere user-98=oneoarco user-99=firstre2 user-100=vivienn1 user-101=bedfords user-102=bemadonn
Sep 19 00:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ggaaorgu user-104=belle user-105=newstoda user-106=alexadmin user-107=skyfirec user-108=stuartge user-109=askhform user-110=innovat1 user-111=nativene user-112=markward user-113=foundation user-114=booff user-115=maflemin user-116=lbscrmod user-117=athenare user-118=connect9 user-119=vantagep user-120=ulsukarm user-121=jarvisin user-122=theblack user-123=hodgesonweb user-124=spectrum user-125=still user-126=agproduc user-127=leereyn1 user-128=stephani user-129=lakesan1 user-130=brmrjxl user-131=sarafoundation user-132=atestord user-133=strathar user-134=wilsonsw user-135=musorguk user-136=megacards user-137=martsblo user-138=ptkxhsbt user-139=dickemery123 user-140=lbhyisi user-141=hhdugcor user-142=magichat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 00:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 00:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:31 nativespace-cdp sudo[3699268]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:31 nativespace-cdp sudo[3699275]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gWwJZ72Lrf5wfKpz.~
Sep 19 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:31 nativespace-cdp sudo[3699281]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gWwJZ72Lrf5wfKpz.~'
Sep 19 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:31 nativespace-cdp sudo[3699285]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gWwJZ72Lrf5wfKpz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:31 nativespace-cdp sudo[3699291]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:31 nativespace-cdp sudo[3699296]: pam_unix(sudo:session): session closed for user root
Sep 19 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 00:09:33 nativespace-cdp sudo[3699317]: pam_unix(sudo:session): session closed for user root
Sep 19 00:11:33 nativespace-cdp sshd[3699776]: Connection closed by 159.100.136.21 port 47368 [preauth]
Sep 19 00:16:33 nativespace-cdp sshd[3700949]: Connection closed by 159.100.136.21 port 56936 [preauth]
Sep 19 00:21:34 nativespace-cdp sshd[3702420]: Connection closed by 159.100.136.21 port 37716 [preauth]
Sep 19 00:26:33 nativespace-cdp sshd[3703589]: Connection closed by 159.100.136.21 port 47654 [preauth]
Sep 19 00:31:35 nativespace-cdp sshd[3704670]: Connection closed by 159.100.136.21 port 56076 [preauth]
Sep 19 00:36:33 nativespace-cdp sshd[3706116]: Connection closed by 159.100.136.21 port 37186 [preauth]
Sep 19 00:46:33 nativespace-cdp sshd[3708558]: Connection closed by 159.100.136.21 port 55874 [preauth]
Sep 19 00:51:33 nativespace-cdp sshd[3710154]: Connection closed by 159.100.136.21 port 37054 [preauth]
Sep 19 00:56:33 nativespace-cdp sshd[3711134]: Connection closed by 159.100.136.21 port 46678 [preauth]
Sep 19 01:01:33 nativespace-cdp sshd[3712350]: Connection closed by 159.100.136.21 port 55766 [preauth]
Sep 19 01:06:33 nativespace-cdp sshd[3713389]: Connection closed by 159.100.136.21 port 37374 [preauth]
Sep 19 01:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 01:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:22 nativespace-cdp sudo[3714026]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 01:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:22 nativespace-cdp sudo[3714030]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 01:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:23 nativespace-cdp sudo[3714033]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 01:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:23 nativespace-cdp sudo[3714037]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 01:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:25 nativespace-cdp sudo[3714040]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:25 nativespace-cdp sudo[3714054]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:25 nativespace-cdp sudo[3714057]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:25 nativespace-cdp sudo[3714060]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:25 nativespace-cdp sudo[3714063]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:25 nativespace-cdp sudo[3714066]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:26 nativespace-cdp sudo[3714069]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 01:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:38 nativespace-cdp sudo[3714123]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 01:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:38 nativespace-cdp sudo[3714127]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tomandle user-2=jennimil user-3=chrisdal user-4=mcdermos user-5=careers user-6=nbhavers user-7=david user-8=attlebor user-9=lucy user-10=onlycont user-11=ranxterc user-12=outdoorc user-13=hodgsonmail user-14=branko user-15=romaldki user-16=nove user-17=boldover user-18=bakery user-19=sosevalu user-20=crrtipdl user-21=oubpgvbx user-22=tstardom user-23=what user-24=cath user-25=sketchy user-26=havantho user-27=nvihkvu user-28=ladburyp user-29=dancinggardener user-30=stagingerris user-31=kategilpin user-32=design user-33=sibtoncc user-34=asandcoc user-35=bwppodcast user-36=zebrapho user-37=steve user-38=burydropin user-39=fawcettd user-40=nsceres user-41=beauty user-42=eatspam user-43=darkstar user-44=dhyana user-45=nscdp user-46=health2045 user-47=fortunaz user-48=leftie user-49=foods
Sep 19 01:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=lkpier user-51=ctedorgu user-52=philmcph user-53=steakbridieme user-54=donnychicago user-55=firstre5 user-56=smrszyqg user-57=isleofwi user-58=hidden user-59=nomistakes user-60=tigerlet user-61=barbersh user-62=cathski user-63=cambria1 user-64=reliable user-65=ninejimm user-66=paulmca1 user-67=howardon user-68=pugwash user-69=cwsocial user-70=hirefootballgame user-71=eugincou user-72=courseme user-73=seftvta user-74=jonhartl user-75=ultbcrra user-76=firstres user-77=opaiscyx user-78=coursemc user-79=firstrel user-80=clarkass user-81=costestimatorco user-82=firstred user-83=southlon user-84=highlegh user-85=gilpin user-86=milloyco user-87=elecleis user-88=hubmaster user-89=carsinyo user-90=fetch user-91=accooper user-92=ianrayne user-93=connectedshoppin user-94=thqkgnbz user-95=brighto1 user-96=nstriton user-97=firstre2 user-98=vivienn1 user-99=battlere user-100=oneoarco user-101=bedfords user-102=ggaaorgu
Sep 19 01:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=belle user-104=newstoda user-105=bemadonn user-106=skyfirec user-107=alexadmin user-108=innovat1 user-109=askhform user-110=stuartge user-111=nativene user-112=markward user-113=foundation user-114=booff user-115=athenare user-116=connect9 user-117=vantagep user-118=maflemin user-119=lbscrmod user-120=ulsukarm user-121=jarvisin user-122=spectrum user-123=hodgesonweb user-124=theblack user-125=still user-126=agproduc user-127=stephani user-128=leereyn1 user-129=lakesan1 user-130=brmrjxl user-131=strathar user-132=sarafoundation user-133=atestord user-134=wilsonsw user-135=musorguk user-136=megacards user-137=martsblo user-138=dickemery123 user-139=ptkxhsbt user-140=lbhyisi user-141=hhdugcor user-142=magichat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 01:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 01:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:39 nativespace-cdp sudo[3714132]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:40 nativespace-cdp sudo[3714147]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2ajqV8siRIvxiTJh.~
Sep 19 01:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:41 nativespace-cdp sudo[3714150]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2ajqV8siRIvxiTJh.~'
Sep 19 01:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:41 nativespace-cdp sudo[3714154]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2ajqV8siRIvxiTJh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 01:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:41 nativespace-cdp sudo[3714158]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 01:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:41 nativespace-cdp sudo[3714161]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 19 01:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:42 nativespace-cdp sudo[3714164]: pam_unix(sudo:session): session closed for user root
Sep 19 01:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 01:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 01:09:45 nativespace-cdp sudo[3714193]: pam_unix(sudo:session): session closed for user root
Sep 19 01:11:36 nativespace-cdp sshd[3714744]: Connection closed by 159.100.136.21 port 46784 [preauth]
Sep 19 01:16:33 nativespace-cdp sshd[3716047]: Connection closed by 159.100.136.21 port 56530 [preauth]
Sep 19 01:21:36 nativespace-cdp sshd[3717638]: Connection closed by 159.100.136.21 port 37682 [preauth]
Sep 19 01:26:33 nativespace-cdp sshd[3718597]: Connection closed by 159.100.136.21 port 47466 [preauth]
Sep 19 01:31:33 nativespace-cdp sshd[3719688]: Connection closed by 159.100.136.21 port 57148 [preauth]
Sep 19 01:36:33 nativespace-cdp sshd[3721223]: Connection closed by 159.100.136.21 port 38074 [preauth]
Sep 19 01:41:33 nativespace-cdp sshd[3722280]: Connection closed by 159.100.136.21 port 47152 [preauth]
Sep 19 01:46:35 nativespace-cdp sshd[3723296]: Connection closed by 159.100.136.21 port 56808 [preauth]
Sep 19 01:51:35 nativespace-cdp sshd[3724855]: Connection closed by 159.100.136.21 port 38016 [preauth]
Sep 19 01:56:33 nativespace-cdp sshd[3725894]: Connection closed by 159.100.136.21 port 47120 [preauth]
Sep 19 02:01:35 nativespace-cdp sshd[3727024]: Connection closed by 159.100.136.21 port 55934 [preauth]
Sep 19 02:06:33 nativespace-cdp sshd[3728445]: Connection closed by 159.100.136.21 port 37394 [preauth]
Sep 19 02:07:45 nativespace-cdp sshd[3728613]: Invalid user oracle from 154.92.23.218 port 34920
Sep 19 02:07:45 nativespace-cdp sshd[3728613]: input_userauth_request: invalid user oracle [preauth]
Sep 19 02:07:46 nativespace-cdp sshd[3728613]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:07:46 nativespace-cdp sshd[3728613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218
Sep 19 02:07:47 nativespace-cdp sshd[3728613]: Failed password for invalid user oracle from 154.92.23.218 port 34920 ssh2
Sep 19 02:07:47 nativespace-cdp sshd[3728613]: Received disconnect from 154.92.23.218 port 34920:11: Bye Bye [preauth]
Sep 19 02:07:47 nativespace-cdp sshd[3728613]: Disconnected from 154.92.23.218 port 34920 [preauth]
Sep 19 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:22 nativespace-cdp sudo[3728988]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:22 nativespace-cdp sudo[3728991]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:22 nativespace-cdp sudo[3728994]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 02:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:22 nativespace-cdp sudo[3729000]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 02:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729003]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729013]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729017]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729020]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729024]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729027]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 02:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:24 nativespace-cdp sudo[3729030]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:29 nativespace-cdp sudo[3729050]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:29 nativespace-cdp sudo[3729054]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=carsinyo user-3=fetch user-4=milloyco user-5=gilpin user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=coursemc user-12=opaiscyx user-13=jonhartl user-14=seftvta user-15=ultbcrra user-16=firstres user-17=firstred user-18=southlon user-19=highlegh user-20=firstrel user-21=clarkass user-22=costestimatorco user-23=skyfirec user-24=alexadmin user-25=nativene user-26=innovat1 user-27=stuartge user-28=askhform user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=ggaaorgu user-36=belle user-37=newstoda user-38=bemadonn user-39=bedfords user-40=spectrum user-41=theblack user-42=hodgesonweb user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=still user-47=agproduc
Sep 19 02:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=athenare user-49=connect9 user-50=vantagep user-51=maflemin user-52=lbscrmod user-53=markward user-54=booff user-55=foundation user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=strathar user-64=sarafoundation user-65=atestord user-66=brmrjxl user-67=lakesan1 user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=outdoorc user-76=ranxterc user-77=hodgsonmail user-78=branko user-79=jennimil user-80=tomandle user-81=careers user-82=nbhavers user-83=david user-84=chrisdal user-85=mcdermos user-86=cath user-87=sketchy user-88=havantho user-89=nvihkvu user-90=tstardom user-91=oubpgvbx user-92=what user-93=design user-94=ladburyp user-95=dancinggardener user-96=stagingerris user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=sosevalu
Sep 19 02:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=beauty user-108=eatspam user-109=darkstar user-110=sibtoncc user-111=asandcoc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=paulmca1 user-116=howardon user-117=pugwash user-118=cwsocial user-119=cambria1 user-120=cathski user-121=ninejimm user-122=reliable user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=philmcph user-128=ctedorgu user-129=donnychicago user-130=steakbridieme user-131=firstre5 user-132=nscdp user-133=fortunaz user-134=health2045 user-135=leftie user-136=foods user-137=hidden user-138=nomistakes user-139=tigerlet user-140=barbersh user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 19 02:09:29 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:30 nativespace-cdp sudo[3729061]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:30 nativespace-cdp sudo[3729067]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-67OI5DEn5B3pSNKO.~
Sep 19 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:30 nativespace-cdp sudo[3729070]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-67OI5DEn5B3pSNKO.~'
Sep 19 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:30 nativespace-cdp sudo[3729073]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-67OI5DEn5B3pSNKO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:30 nativespace-cdp sudo[3729077]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:31 nativespace-cdp sudo[3729080]: pam_unix(sudo:session): session closed for user root
Sep 19 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 02:09:32 nativespace-cdp sudo[3729101]: pam_unix(sudo:session): session closed for user root
Sep 19 02:10:43 nativespace-cdp sshd[3729383]: Invalid user git from 181.113.119.11 port 46750
Sep 19 02:10:43 nativespace-cdp sshd[3729383]: input_userauth_request: invalid user git [preauth]
Sep 19 02:10:43 nativespace-cdp sshd[3729383]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:10:43 nativespace-cdp sshd[3729383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.113.119.11
Sep 19 02:10:45 nativespace-cdp sshd[3729383]: Failed password for invalid user git from 181.113.119.11 port 46750 ssh2
Sep 19 02:10:45 nativespace-cdp sshd[3729383]: Received disconnect from 181.113.119.11 port 46750:11: Bye Bye [preauth]
Sep 19 02:10:45 nativespace-cdp sshd[3729383]: Disconnected from 181.113.119.11 port 46750 [preauth]
Sep 19 02:11:33 nativespace-cdp sshd[3729572]: Connection closed by 159.100.136.21 port 46576 [preauth]
Sep 19 02:12:41 nativespace-cdp sshd[3729741]: Invalid user admin from 154.92.23.218 port 53078
Sep 19 02:12:41 nativespace-cdp sshd[3729741]: input_userauth_request: invalid user admin [preauth]
Sep 19 02:12:41 nativespace-cdp sshd[3729741]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:12:41 nativespace-cdp sshd[3729741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218
Sep 19 02:12:43 nativespace-cdp sshd[3729741]: Failed password for invalid user admin from 154.92.23.218 port 53078 ssh2
Sep 19 02:12:43 nativespace-cdp sshd[3729741]: Received disconnect from 154.92.23.218 port 53078:11: Bye Bye [preauth]
Sep 19 02:12:43 nativespace-cdp sshd[3729741]: Disconnected from 154.92.23.218 port 53078 [preauth]
Sep 19 02:12:44 nativespace-cdp sshd[3729726]: Connection closed by 181.113.119.11 port 51508 [preauth]
Sep 19 02:13:22 nativespace-cdp sshd[3729858]: Invalid user server from 181.113.119.11 port 50712
Sep 19 02:13:22 nativespace-cdp sshd[3729858]: input_userauth_request: invalid user server [preauth]
Sep 19 02:13:22 nativespace-cdp sshd[3729858]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:13:22 nativespace-cdp sshd[3729858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.113.119.11
Sep 19 02:13:22 nativespace-cdp sshd[3729852]: Invalid user guest from 154.92.23.218 port 37220
Sep 19 02:13:22 nativespace-cdp sshd[3729852]: input_userauth_request: invalid user guest [preauth]
Sep 19 02:13:22 nativespace-cdp sshd[3729852]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:13:22 nativespace-cdp sshd[3729852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218
Sep 19 02:13:23 nativespace-cdp sshd[3729858]: Failed password for invalid user server from 181.113.119.11 port 50712 ssh2
Sep 19 02:13:24 nativespace-cdp sshd[3729858]: Received disconnect from 181.113.119.11 port 50712:11: Bye Bye [preauth]
Sep 19 02:13:24 nativespace-cdp sshd[3729858]: Disconnected from 181.113.119.11 port 50712 [preauth]
Sep 19 02:13:24 nativespace-cdp sshd[3729852]: Failed password for invalid user guest from 154.92.23.218 port 37220 ssh2
Sep 19 02:13:24 nativespace-cdp sshd[3729852]: Received disconnect from 154.92.23.218 port 37220:11: Bye Bye [preauth]
Sep 19 02:13:24 nativespace-cdp sshd[3729852]: Disconnected from 154.92.23.218 port 37220 [preauth]
Sep 19 02:14:06 nativespace-cdp sshd[3730132]: Invalid user steam from 181.113.119.11 port 50948
Sep 19 02:14:06 nativespace-cdp sshd[3730132]: input_userauth_request: invalid user steam [preauth]
Sep 19 02:14:06 nativespace-cdp sshd[3730132]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:14:06 nativespace-cdp sshd[3730132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.113.119.11
Sep 19 02:14:08 nativespace-cdp sshd[3730132]: Failed password for invalid user steam from 181.113.119.11 port 50948 ssh2
Sep 19 02:16:03 nativespace-cdp sshd[3730605]: Invalid user ftpuser from 121.122.119.74 port 51368
Sep 19 02:16:03 nativespace-cdp sshd[3730605]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 02:16:03 nativespace-cdp sshd[3730605]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:16:03 nativespace-cdp sshd[3730605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.119.74
Sep 19 02:16:05 nativespace-cdp sshd[3730605]: Failed password for invalid user ftpuser from 121.122.119.74 port 51368 ssh2
Sep 19 02:16:05 nativespace-cdp sshd[3730605]: Received disconnect from 121.122.119.74 port 51368:11: Bye Bye [preauth]
Sep 19 02:16:05 nativespace-cdp sshd[3730605]: Disconnected from 121.122.119.74 port 51368 [preauth]
Sep 19 02:16:33 nativespace-cdp sshd[3730701]: Connection closed by 159.100.136.21 port 56052 [preauth]
Sep 19 02:20:40 nativespace-cdp sshd[3731633]: Invalid user student from 121.122.119.74 port 45428
Sep 19 02:20:40 nativespace-cdp sshd[3731633]: input_userauth_request: invalid user student [preauth]
Sep 19 02:20:40 nativespace-cdp sshd[3731633]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:20:40 nativespace-cdp sshd[3731633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.119.74
Sep 19 02:20:42 nativespace-cdp sshd[3731633]: Failed password for invalid user student from 121.122.119.74 port 45428 ssh2
Sep 19 02:20:42 nativespace-cdp sshd[3731633]: Received disconnect from 121.122.119.74 port 45428:11: Bye Bye [preauth]
Sep 19 02:20:42 nativespace-cdp sshd[3731633]: Disconnected from 121.122.119.74 port 45428 [preauth]
Sep 19 02:21:34 nativespace-cdp sshd[3731812]: Connection closed by 121.122.119.74 port 51737 [preauth]
Sep 19 02:21:34 nativespace-cdp sshd[3731822]: Connection closed by 159.100.136.21 port 36506 [preauth]
Sep 19 02:22:59 nativespace-cdp sshd[3732025]: Invalid user deploy from 121.122.119.74 port 36115
Sep 19 02:22:59 nativespace-cdp sshd[3732025]: input_userauth_request: invalid user deploy [preauth]
Sep 19 02:22:59 nativespace-cdp sshd[3732025]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:22:59 nativespace-cdp sshd[3732025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.119.74
Sep 19 02:23:01 nativespace-cdp sshd[3732025]: Failed password for invalid user deploy from 121.122.119.74 port 36115 ssh2
Sep 19 02:23:01 nativespace-cdp sshd[3732025]: Received disconnect from 121.122.119.74 port 36115:11: Bye Bye [preauth]
Sep 19 02:23:01 nativespace-cdp sshd[3732025]: Disconnected from 121.122.119.74 port 36115 [preauth]
Sep 19 02:26:34 nativespace-cdp sshd[3733123]: Connection closed by 159.100.136.21 port 45652 [preauth]
Sep 19 02:31:34 nativespace-cdp sshd[3734433]: Connection closed by 159.100.136.21 port 53698 [preauth]
Sep 19 02:36:36 nativespace-cdp sshd[3736009]: Connection closed by 159.100.136.21 port 34918 [preauth]
Sep 19 02:40:58 nativespace-cdp sshd[3736965]: Invalid user wchen from 195.56.253.49 port 59984
Sep 19 02:40:58 nativespace-cdp sshd[3736965]: input_userauth_request: invalid user wchen [preauth]
Sep 19 02:40:58 nativespace-cdp sshd[3736965]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:40:58 nativespace-cdp sshd[3736965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.56.253.49
Sep 19 02:41:00 nativespace-cdp sshd[3736965]: Failed password for invalid user wchen from 195.56.253.49 port 59984 ssh2
Sep 19 02:41:00 nativespace-cdp sshd[3736965]: Received disconnect from 195.56.253.49 port 59984:11: Bye Bye [preauth]
Sep 19 02:41:00 nativespace-cdp sshd[3736965]: Disconnected from 195.56.253.49 port 59984 [preauth]
Sep 19 02:41:33 nativespace-cdp sshd[3737084]: Connection closed by 159.100.136.21 port 44250 [preauth]
Sep 19 02:46:33 nativespace-cdp sshd[3738312]: Connection closed by 159.100.136.21 port 53460 [preauth]
Sep 19 02:49:43 nativespace-cdp sshd[3739191]: Invalid user deniz from 195.56.253.49 port 40050
Sep 19 02:49:43 nativespace-cdp sshd[3739191]: input_userauth_request: invalid user deniz [preauth]
Sep 19 02:49:43 nativespace-cdp sshd[3739191]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:49:43 nativespace-cdp sshd[3739191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.56.253.49
Sep 19 02:49:45 nativespace-cdp sshd[3739191]: Failed password for invalid user deniz from 195.56.253.49 port 40050 ssh2
Sep 19 02:49:45 nativespace-cdp sshd[3739191]: Received disconnect from 195.56.253.49 port 40050:11: Bye Bye [preauth]
Sep 19 02:49:45 nativespace-cdp sshd[3739191]: Disconnected from 195.56.253.49 port 40050 [preauth]
Sep 19 02:50:54 nativespace-cdp sshd[3739788]: Invalid user funmi from 195.56.253.49 port 58794
Sep 19 02:50:54 nativespace-cdp sshd[3739788]: input_userauth_request: invalid user funmi [preauth]
Sep 19 02:50:54 nativespace-cdp sshd[3739788]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 02:50:54 nativespace-cdp sshd[3739788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.56.253.49
Sep 19 02:50:56 nativespace-cdp sshd[3739788]: Failed password for invalid user funmi from 195.56.253.49 port 58794 ssh2
Sep 19 02:50:56 nativespace-cdp sshd[3739788]: Received disconnect from 195.56.253.49 port 58794:11: Bye Bye [preauth]
Sep 19 02:50:56 nativespace-cdp sshd[3739788]: Disconnected from 195.56.253.49 port 58794 [preauth]
Sep 19 02:51:35 nativespace-cdp sshd[3739950]: Connection closed by 159.100.136.21 port 34574 [preauth]
Sep 19 02:56:33 nativespace-cdp sshd[3740932]: Connection closed by 159.100.136.21 port 43780 [preauth]
Sep 19 03:01:35 nativespace-cdp sshd[3742131]: Connection closed by 159.100.136.21 port 52880 [preauth]
Sep 19 03:01:36 nativespace-cdp sshd[3742125]: Invalid user admin1 from 181.90.218.235 port 52648
Sep 19 03:01:36 nativespace-cdp sshd[3742125]: input_userauth_request: invalid user admin1 [preauth]
Sep 19 03:01:36 nativespace-cdp sshd[3742125]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:01:36 nativespace-cdp sshd[3742125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.218.235
Sep 19 03:01:37 nativespace-cdp sshd[3742125]: Failed password for invalid user admin1 from 181.90.218.235 port 52648 ssh2
Sep 19 03:01:38 nativespace-cdp sshd[3742125]: Received disconnect from 181.90.218.235 port 52648:11: Bye Bye [preauth]
Sep 19 03:01:38 nativespace-cdp sshd[3742125]: Disconnected from 181.90.218.235 port 52648 [preauth]
Sep 19 03:02:59 nativespace-cdp sshd[3743146]: Invalid user user from 89.216.47.154 port 56390
Sep 19 03:02:59 nativespace-cdp sshd[3743146]: input_userauth_request: invalid user user [preauth]
Sep 19 03:02:59 nativespace-cdp sshd[3743146]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:02:59 nativespace-cdp sshd[3743146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154
Sep 19 03:03:00 nativespace-cdp sshd[3743146]: Failed password for invalid user user from 89.216.47.154 port 56390 ssh2
Sep 19 03:03:02 nativespace-cdp sshd[3743146]: Received disconnect from 89.216.47.154 port 56390:11: Bye Bye [preauth]
Sep 19 03:03:02 nativespace-cdp sshd[3743146]: Disconnected from 89.216.47.154 port 56390 [preauth]
Sep 19 03:04:39 nativespace-cdp sshd[3743808]: Invalid user guest from 197.248.187.251 port 48534
Sep 19 03:04:39 nativespace-cdp sshd[3743808]: input_userauth_request: invalid user guest [preauth]
Sep 19 03:04:39 nativespace-cdp sshd[3743808]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:04:39 nativespace-cdp sshd[3743808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.187.251
Sep 19 03:04:41 nativespace-cdp sshd[3743808]: Failed password for invalid user guest from 197.248.187.251 port 48534 ssh2
Sep 19 03:04:42 nativespace-cdp sshd[3743808]: Received disconnect from 197.248.187.251 port 48534:11: Bye Bye [preauth]
Sep 19 03:04:42 nativespace-cdp sshd[3743808]: Disconnected from 197.248.187.251 port 48534 [preauth]
Sep 19 03:05:33 nativespace-cdp sshd[3744146]: Invalid user git from 186.125.26.140 port 36622
Sep 19 03:05:33 nativespace-cdp sshd[3744146]: input_userauth_request: invalid user git [preauth]
Sep 19 03:05:33 nativespace-cdp sshd[3744146]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:05:33 nativespace-cdp sshd[3744146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.125.26.140
Sep 19 03:05:35 nativespace-cdp sshd[3744146]: Failed password for invalid user git from 186.125.26.140 port 36622 ssh2
Sep 19 03:05:40 nativespace-cdp sshd[3744146]: Received disconnect from 186.125.26.140 port 36622:11: Bye Bye [preauth]
Sep 19 03:05:40 nativespace-cdp sshd[3744146]: Disconnected from 186.125.26.140 port 36622 [preauth]
Sep 19 03:06:36 nativespace-cdp sshd[3744351]: Connection closed by 159.100.136.21 port 34144 [preauth]
Sep 19 03:07:30 nativespace-cdp sshd[3744470]: Invalid user es from 89.216.47.154 port 50504
Sep 19 03:07:30 nativespace-cdp sshd[3744470]: input_userauth_request: invalid user es [preauth]
Sep 19 03:07:30 nativespace-cdp sshd[3744470]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:07:30 nativespace-cdp sshd[3744470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154
Sep 19 03:07:32 nativespace-cdp sshd[3744470]: Failed password for invalid user es from 89.216.47.154 port 50504 ssh2
Sep 19 03:07:32 nativespace-cdp sshd[3744470]: Received disconnect from 89.216.47.154 port 50504:11: Bye Bye [preauth]
Sep 19 03:07:32 nativespace-cdp sshd[3744470]: Disconnected from 89.216.47.154 port 50504 [preauth]
Sep 19 03:07:51 nativespace-cdp sshd[3744526]: Invalid user admin1 from 197.248.187.251 port 54478
Sep 19 03:07:51 nativespace-cdp sshd[3744526]: input_userauth_request: invalid user admin1 [preauth]
Sep 19 03:07:51 nativespace-cdp sshd[3744526]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:07:51 nativespace-cdp sshd[3744526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.187.251
Sep 19 03:07:53 nativespace-cdp sshd[3744526]: Failed password for invalid user admin1 from 197.248.187.251 port 54478 ssh2
Sep 19 03:07:53 nativespace-cdp sshd[3744526]: Received disconnect from 197.248.187.251 port 54478:11: Bye Bye [preauth]
Sep 19 03:07:53 nativespace-cdp sshd[3744526]: Disconnected from 197.248.187.251 port 54478 [preauth]
Sep 19 03:08:09 nativespace-cdp sshd[3744590]: Invalid user ftpuser from 89.216.47.154 port 56887
Sep 19 03:08:09 nativespace-cdp sshd[3744590]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 03:08:09 nativespace-cdp sshd[3744590]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:08:09 nativespace-cdp sshd[3744590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.47.154
Sep 19 03:08:10 nativespace-cdp sshd[3744590]: Failed password for invalid user ftpuser from 89.216.47.154 port 56887 ssh2
Sep 19 03:08:11 nativespace-cdp sshd[3744590]: Received disconnect from 89.216.47.154 port 56887:11: Bye Bye [preauth]
Sep 19 03:08:11 nativespace-cdp sshd[3744590]: Disconnected from 89.216.47.154 port 56887 [preauth]
Sep 19 03:08:13 nativespace-cdp sshd[3744610]: Invalid user frappe from 186.125.26.140 port 36178
Sep 19 03:08:13 nativespace-cdp sshd[3744610]: input_userauth_request: invalid user frappe [preauth]
Sep 19 03:08:13 nativespace-cdp sshd[3744610]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:08:13 nativespace-cdp sshd[3744610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.125.26.140
Sep 19 03:08:15 nativespace-cdp sshd[3744610]: Failed password for invalid user frappe from 186.125.26.140 port 36178 ssh2
Sep 19 03:08:15 nativespace-cdp sshd[3744610]: Received disconnect from 186.125.26.140 port 36178:11: Bye Bye [preauth]
Sep 19 03:08:15 nativespace-cdp sshd[3744610]: Disconnected from 186.125.26.140 port 36178 [preauth]
Sep 19 03:08:40 nativespace-cdp sshd[3744696]: Invalid user admin1 from 181.90.218.235 port 54888
Sep 19 03:08:40 nativespace-cdp sshd[3744696]: input_userauth_request: invalid user admin1 [preauth]
Sep 19 03:08:40 nativespace-cdp sshd[3744696]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:08:40 nativespace-cdp sshd[3744696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.218.235
Sep 19 03:08:42 nativespace-cdp sshd[3744696]: Failed password for invalid user admin1 from 181.90.218.235 port 54888 ssh2
Sep 19 03:08:42 nativespace-cdp sshd[3744696]: Received disconnect from 181.90.218.235 port 54888:11: Bye Bye [preauth]
Sep 19 03:08:42 nativespace-cdp sshd[3744696]: Disconnected from 181.90.218.235 port 54888 [preauth]
Sep 19 03:08:47 nativespace-cdp sshd[3744720]: Invalid user server from 197.248.187.251 port 41120
Sep 19 03:08:47 nativespace-cdp sshd[3744720]: input_userauth_request: invalid user server [preauth]
Sep 19 03:08:47 nativespace-cdp sshd[3744720]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:08:47 nativespace-cdp sshd[3744720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.187.251
Sep 19 03:08:48 nativespace-cdp sshd[3744720]: Failed password for invalid user server from 197.248.187.251 port 41120 ssh2
Sep 19 03:08:49 nativespace-cdp sshd[3744720]: Received disconnect from 197.248.187.251 port 41120:11: Bye Bye [preauth]
Sep 19 03:08:49 nativespace-cdp sshd[3744720]: Disconnected from 197.248.187.251 port 41120 [preauth]
Sep 19 03:09:08 nativespace-cdp sshd[3744800]: Invalid user ftpuser from 186.125.26.140 port 48620
Sep 19 03:09:08 nativespace-cdp sshd[3744800]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 03:09:08 nativespace-cdp sshd[3744800]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:09:08 nativespace-cdp sshd[3744800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.125.26.140
Sep 19 03:09:10 nativespace-cdp sshd[3744800]: Failed password for invalid user ftpuser from 186.125.26.140 port 48620 ssh2
Sep 19 03:09:10 nativespace-cdp sshd[3744800]: Received disconnect from 186.125.26.140 port 48620:11: Bye Bye [preauth]
Sep 19 03:09:10 nativespace-cdp sshd[3744800]: Disconnected from 186.125.26.140 port 48620 [preauth]
Sep 19 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:21 nativespace-cdp sudo[3744976]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:21 nativespace-cdp sudo[3744979]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 03:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:22 nativespace-cdp sudo[3744982]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 03:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:22 nativespace-cdp sudo[3744987]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 03:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3744990]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 03:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3744998]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 03:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3745001]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 03:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3745005]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 03:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3745008]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 03:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3745011]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 03:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:23 nativespace-cdp sudo[3745015]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 03:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:39 nativespace-cdp sudo[3745061]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 03:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:39 nativespace-cdp sudo[3745065]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bedfords user-2=belle user-3=ggaaorgu user-4=newstoda user-5=bemadonn user-6=brighto1 user-7=nstriton user-8=firstre2 user-9=vivienn1 user-10=battlere user-11=oneoarco user-12=innovat1 user-13=askhform user-14=stuartge user-15=nativene user-16=skyfirec user-17=alexadmin user-18=clarkass user-19=firstrel user-20=costestimatorco user-21=firstred user-22=southlon user-23=highlegh user-24=jonhartl user-25=seftvta user-26=ultbcrra user-27=firstres user-28=coursemc user-29=opaiscyx user-30=accooper user-31=ianrayne user-32=connectedshoppin user-33=thqkgnbz user-34=gilpin user-35=milloyco user-36=elecleis user-37=hubmaster user-38=carsinyo user-39=fetch user-40=wilsonsw user-41=musorguk user-42=megacards user-43=lakesan1 user-44=brmrjxl user-45=strathar user-46=sarafoundation user-47=atestord
Sep 19 03:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=lbhyisi user-49=hhdugcor user-50=magichat user-51=martsblo user-52=dickemery123 user-53=ptkxhsbt user-54=ulsukarm user-55=foundation user-56=markward user-57=booff user-58=athenare user-59=connect9 user-60=vantagep user-61=maflemin user-62=lbscrmod user-63=still user-64=agproduc user-65=stephani user-66=leereyn1 user-67=jarvisin user-68=spectrum user-69=hodgesonweb user-70=theblack user-71=bakery user-72=sosevalu user-73=crrtipdl user-74=nove user-75=boldover user-76=ladburyp user-77=stagingerris user-78=dancinggardener user-79=kategilpin user-80=design user-81=tstardom user-82=oubpgvbx user-83=what user-84=sketchy user-85=cath user-86=havantho user-87=nvihkvu user-88=chrisdal user-89=mcdermos user-90=careers user-91=nbhavers user-92=david user-93=tomandle user-94=jennimil user-95=hodgsonmail user-96=ranxterc user-97=outdoorc user-98=branko user-99=romaldki user-100=attlebor user-101=lucy
Sep 19 03:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=onlycont user-103=isleofwi user-104=smrszyqg user-105=hidden user-106=nomistakes user-107=barbersh user-108=tigerlet user-109=nscdp user-110=health2045 user-111=fortunaz user-112=leftie user-113=foods user-114=lkpier user-115=philmcph user-116=ctedorgu user-117=firstre5 user-118=donnychicago user-119=steakbridieme user-120=hirefootballgame user-121=eugincou user-122=courseme user-123=cambria1 user-124=cathski user-125=reliable user-126=ninejimm user-127=paulmca1 user-128=howardon user-129=pugwash user-130=cwsocial user-131=bwppodcast user-132=zebrapho user-133=steve user-134=sibtoncc user-135=asandcoc user-136=beauty user-137=eatspam user-138=darkstar user-139=dhyana user-140=burydropin user-141=fawcettd user-142=nsceres feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 19 03:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 03:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:39 nativespace-cdp sshd[3745047]: Connection closed by 181.90.218.235 port 47532 [preauth]
Sep 19 03:09:39 nativespace-cdp sudo[3745071]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 03:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:40 nativespace-cdp sudo[3745077]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FWpiDLmRS7Y157nj.~
Sep 19 03:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:40 nativespace-cdp sudo[3745080]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FWpiDLmRS7Y157nj.~'
Sep 19 03:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:40 nativespace-cdp sudo[3745083]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FWpiDLmRS7Y157nj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 03:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:40 nativespace-cdp sudo[3745088]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 03:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:40 nativespace-cdp sudo[3745091]: pam_unix(sudo:session): session closed for user root
Sep 19 03:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 03:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 03:09:41 nativespace-cdp sudo[3745111]: pam_unix(sudo:session): session closed for user root
Sep 19 03:10:36 nativespace-cdp sshd[3745363]: Received disconnect from 181.90.218.235 port 39542:11: Bye Bye [preauth]
Sep 19 03:10:36 nativespace-cdp sshd[3745363]: Disconnected from 181.90.218.235 port 39542 [preauth]
Sep 19 03:11:16 nativespace-cdp sshd[3745468]: Invalid user postgres from 181.90.218.235 port 41884
Sep 19 03:11:16 nativespace-cdp sshd[3745468]: input_userauth_request: invalid user postgres [preauth]
Sep 19 03:11:16 nativespace-cdp sshd[3745468]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 03:11:16 nativespace-cdp sshd[3745468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.218.235
Sep 19 03:11:18 nativespace-cdp sshd[3745468]: Failed password for invalid user postgres from 181.90.218.235 port 41884 ssh2
Sep 19 03:11:19 nativespace-cdp sshd[3745468]: Received disconnect from 181.90.218.235 port 41884:11: Bye Bye [preauth]
Sep 19 03:11:19 nativespace-cdp sshd[3745468]: Disconnected from 181.90.218.235 port 41884 [preauth]
Sep 19 03:11:33 nativespace-cdp sshd[3745538]: Connection closed by 159.100.136.21 port 43162 [preauth]
Sep 19 03:16:33 nativespace-cdp sshd[3746541]: Connection closed by 159.100.136.21 port 52348 [preauth]
Sep 19 03:21:34 nativespace-cdp sshd[3748035]: Connection closed by 159.100.136.21 port 32854 [preauth]
Sep 19 03:26:33 nativespace-cdp sshd[3749149]: Connection closed by 159.100.136.21 port 42690 [preauth]
Sep 19 03:31:33 nativespace-cdp sshd[3750206]: Connection closed by 159.100.136.21 port 52274 [preauth]
Sep 19 03:36:36 nativespace-cdp sshd[3751326]: Connection closed by 159.100.136.21 port 33878 [preauth]
Sep 19 03:41:33 nativespace-cdp sshd[3752613]: Connection closed by 159.100.136.21 port 43414 [preauth]
Sep 19 03:46:33 nativespace-cdp sshd[3754085]: Connection closed by 159.100.136.21 port 52966 [preauth]
Sep 19 03:51:33 nativespace-cdp sshd[3755932]: Connection closed by 159.100.136.21 port 34218 [preauth]
Sep 19 03:56:33 nativespace-cdp sshd[3757731]: Connection closed by 159.100.136.21 port 43894 [preauth]
Sep 19 04:01:33 nativespace-cdp sshd[3758897]: Connection closed by 159.100.136.21 port 52318 [preauth]
Sep 19 04:06:36 nativespace-cdp sshd[3760216]: Connection closed by 159.100.136.21 port 60346 [preauth]
Sep 19 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:30 nativespace-cdp sudo[3760784]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:30 nativespace-cdp sudo[3760788]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:32 nativespace-cdp sudo[3760792]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 04:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:32 nativespace-cdp sudo[3760797]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 04:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760800]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760812]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760815]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760818]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760821]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760824]: pam_unix(sudo:session): session closed for user root
Sep 19 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:09:36 nativespace-cdp sudo[3760827]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 04:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:13 nativespace-cdp sudo[3761236]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:14 nativespace-cdp sudo[3761242]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=eatspam user-2=darkstar user-3=beauty user-4=dhyana user-5=burydropin user-6=fawcettd user-7=nsceres user-8=zebrapho user-9=bwppodcast user-10=steve user-11=asandcoc user-12=sibtoncc user-13=hirefootballgame user-14=courseme user-15=eugincou user-16=reliable user-17=ninejimm user-18=cathski user-19=cambria1 user-20=howardon user-21=paulmca1 user-22=pugwash user-23=cwsocial user-24=isleofwi user-25=smrszyqg user-26=tigerlet user-27=barbersh user-28=hidden user-29=nomistakes user-30=fortunaz user-31=health2045 user-32=foods user-33=leftie user-34=nscdp user-35=ctedorgu user-36=philmcph user-37=steakbridieme user-38=donnychicago user-39=firstre5 user-40=lkpier user-41=branko user-42=ranxterc user-43=hodgsonmail user-44=outdoorc user-45=romaldki user-46=attlebor user-47=lucy user-48=onlycont
Sep 19 04:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=mcdermos user-50=chrisdal user-51=careers user-52=nbhavers user-53=david user-54=tomandle user-55=jennimil user-56=kategilpin user-57=ladburyp user-58=stagingerris user-59=dancinggardener user-60=design user-61=what user-62=oubpgvbx user-63=tstardom user-64=nvihkvu user-65=sketchy user-66=cath user-67=havantho user-68=sosevalu user-69=crrtipdl user-70=bakery user-71=nove user-72=boldover user-73=still user-74=agproduc user-75=leereyn1 user-76=stephani user-77=jarvisin user-78=hodgesonweb user-79=theblack user-80=spectrum user-81=ulsukarm user-82=foundation user-83=markward user-84=booff user-85=maflemin user-86=lbscrmod user-87=athenare user-88=connect9 user-89=vantagep user-90=lbhyisi user-91=hhdugcor user-92=magichat user-93=martsblo user-94=ptkxhsbt user-95=dickemery123 user-96=wilsonsw user-97=musorguk user-98=megacards user-99=lakesan1 user-100=brmrjxl user-101=sarafoundation user-102=atestord
Sep 19 04:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=strathar user-104=ianrayne user-105=accooper user-106=thqkgnbz user-107=connectedshoppin user-108=elecleis user-109=gilpin user-110=milloyco user-111=carsinyo user-112=fetch user-113=hubmaster user-114=costestimatorco user-115=clarkass user-116=firstrel user-117=southlon user-118=highlegh user-119=firstred user-120=firstres user-121=seftvta user-122=jonhartl user-123=ultbcrra user-124=coursemc user-125=opaiscyx user-126=stuartge user-127=askhform user-128=innovat1 user-129=nativene user-130=alexadmin user-131=skyfirec user-132=bedfords user-133=bemadonn user-134=belle user-135=ggaaorgu user-136=newstoda user-137=brighto1 user-138=nstriton user-139=battlere user-140=oneoarco user-141=firstre2 user-142=vivienn1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 04:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:15 nativespace-cdp sudo[3761250]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 04:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:16 nativespace-cdp sudo[3761256]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tVVNaqpN6miUw5Gv.~
Sep 19 04:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:16 nativespace-cdp sudo[3761259]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tVVNaqpN6miUw5Gv.~'
Sep 19 04:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:16 nativespace-cdp sudo[3761262]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tVVNaqpN6miUw5Gv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 04:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:16 nativespace-cdp sudo[3761266]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 04:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:16 nativespace-cdp sudo[3761269]: pam_unix(sudo:session): session closed for user root
Sep 19 04:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 04:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:10:24 nativespace-cdp sudo[3761319]: pam_unix(sudo:session): session closed for user root
Sep 19 04:11:33 nativespace-cdp sshd[3761503]: Connection closed by 159.100.136.21 port 41372 [preauth]
Sep 19 04:16:33 nativespace-cdp sshd[3762699]: Connection closed by 159.100.136.21 port 50670 [preauth]
Sep 19 04:21:33 nativespace-cdp sshd[3764463]: Connection closed by 159.100.136.21 port 58770 [preauth]
Sep 19 04:25:49 nativespace-cdp sshd[3765391]: Invalid user judith from 51.222.106.104 port 40334
Sep 19 04:25:49 nativespace-cdp sshd[3765391]: input_userauth_request: invalid user judith [preauth]
Sep 19 04:25:49 nativespace-cdp sshd[3765391]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 04:25:49 nativespace-cdp sshd[3765391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.106.104
Sep 19 04:25:51 nativespace-cdp sshd[3765391]: Failed password for invalid user judith from 51.222.106.104 port 40334 ssh2
Sep 19 04:25:51 nativespace-cdp sshd[3765391]: Received disconnect from 51.222.106.104 port 40334:11: Bye Bye [preauth]
Sep 19 04:25:51 nativespace-cdp sshd[3765391]: Disconnected from 51.222.106.104 port 40334 [preauth]
Sep 19 04:26:33 nativespace-cdp sshd[3765502]: Connection closed by 159.100.136.21 port 40390 [preauth]
Sep 19 04:28:22 nativespace-cdp sshd[3765783]: Invalid user gnome from 51.222.106.104 port 47912
Sep 19 04:28:22 nativespace-cdp sshd[3765783]: input_userauth_request: invalid user gnome [preauth]
Sep 19 04:28:22 nativespace-cdp sshd[3765783]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 04:28:22 nativespace-cdp sshd[3765783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.106.104
Sep 19 04:28:24 nativespace-cdp sshd[3765783]: Failed password for invalid user gnome from 51.222.106.104 port 47912 ssh2
Sep 19 04:28:34 nativespace-cdp sshd[3765783]: Received disconnect from 51.222.106.104 port 47912:11: Bye Bye [preauth]
Sep 19 04:28:34 nativespace-cdp sshd[3765783]: Disconnected from 51.222.106.104 port 47912 [preauth]
Sep 19 04:29:01 nativespace-cdp sshd[3765892]: Invalid user kaushik from 51.222.106.104 port 41792
Sep 19 04:29:01 nativespace-cdp sshd[3765892]: input_userauth_request: invalid user kaushik [preauth]
Sep 19 04:29:01 nativespace-cdp sshd[3765892]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 04:29:01 nativespace-cdp sshd[3765892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.106.104
Sep 19 04:29:04 nativespace-cdp sshd[3765892]: Failed password for invalid user kaushik from 51.222.106.104 port 41792 ssh2
Sep 19 04:29:04 nativespace-cdp sshd[3765892]: Received disconnect from 51.222.106.104 port 41792:11: Bye Bye [preauth]
Sep 19 04:29:04 nativespace-cdp sshd[3765892]: Disconnected from 51.222.106.104 port 41792 [preauth]
Sep 19 04:31:32 nativespace-cdp sshd[3766652]: Connection closed by 159.100.136.21 port 49548 [preauth]
Sep 19 04:36:33 nativespace-cdp sshd[3769283]: Connection closed by 159.100.136.21 port 58648 [preauth]
Sep 19 04:41:46 nativespace-cdp sshd[3771706]: Did not receive identification string from 159.100.136.21 port 39608
Sep 19 04:46:35 nativespace-cdp sshd[3773910]: Connection closed by 159.100.136.21 port 48970 [preauth]
Sep 19 04:51:36 nativespace-cdp sshd[3775445]: Connection closed by 159.100.136.21 port 58250 [preauth]
Sep 19 04:56:33 nativespace-cdp sshd[3776325]: Connection closed by 159.100.136.21 port 39756 [preauth]
Sep 19 04:56:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 04:56:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:56:54 nativespace-cdp sudo[3776388]: pam_unix(sudo:session): session closed for user root
Sep 19 04:56:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 04:56:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:56:54 nativespace-cdp sudo[3776400]: pam_unix(sudo:session): session closed for user root
Sep 19 04:56:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 04:56:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:56:58 nativespace-cdp sudo[3776409]: pam_unix(sudo:session): session closed for user root
Sep 19 04:56:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=clarkass user-3=firstrel user-4=southlon user-5=highlegh user-6=firstred user-7=firstres user-8=jonhartl user-9=seftvta user-10=ultbcrra user-11=opaiscyx user-12=coursemc user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=gilpin user-19=milloyco user-20=carsinyo user-21=fetch user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=ggaaorgu user-26=belle user-27=newstoda user-28=brighto1 user-29=nstriton user-30=battlere user-31=oneoarco user-32=firstre2 user-33=vivienn1 user-34=stuartge user-35=askhform user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=markward user-42=booff user-43=foundation user-44=maflemin user-45=lbscrmod user-46=connect9 user-47=athenare user-48=vantagep
Sep 19 04:56:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=still user-50=agproduc user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=wilsonsw user-58=musorguk user-59=megacards user-60=lakesan1 user-61=brmrjxl user-62=sarafoundation user-63=atestord user-64=strathar user-65=lbhyisi user-66=hhdugcor user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=careers user-74=nbhavers user-75=david user-76=tomandle user-77=jennimil user-78=branko user-79=outdoorc user-80=ranxterc user-81=hodgsonmail user-82=romaldki user-83=attlebor user-84=lucy user-85=onlycont user-86=sosevalu user-87=crrtipdl user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=ladburyp user-93=stagingerris user-94=dancinggardener user-95=design user-96=what user-97=oubpgvbx user-98=tstardom user-99=nvihkvu user-100=sketchy user-101=cath user-102=havantho
Sep 19 04:56:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=asandcoc user-107=sibtoncc user-108=eatspam user-109=darkstar user-110=beauty user-111=dhyana user-112=burydropin user-113=fawcettd user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=barbersh user-118=tigerlet user-119=hidden user-120=nomistakes user-121=fortunaz user-122=health2045 user-123=foods user-124=leftie user-125=nscdp user-126=philmcph user-127=ctedorgu user-128=donnychicago user-129=firstre5 user-130=steakbridieme user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=reliable user-136=ninejimm user-137=cathski user-138=cambria1 user-139=paulmca1 user-140=howardon user-141=pugwash user-142=cwsocial feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 04:56:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 04:56:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:56:59 nativespace-cdp sudo[3776414]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 19 04:57:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:01 nativespace-cdp sudo[3776423]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 19 04:57:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:02 nativespace-cdp sudo[3776428]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 19 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:57:35 nativespace-cdp sudo[3776656]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 19 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:36 nativespace-cdp sudo[3776662]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 19 04:57:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:38 nativespace-cdp sudo[3776668]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 19 04:57:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:40 nativespace-cdp sudo[3776678]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 19 04:57:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:40 nativespace-cdp sudo[3776686]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 19 04:57:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:41 nativespace-cdp sudo[3776699]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 19 04:57:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:46 nativespace-cdp sudo[3776705]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 19 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:46 nativespace-cdp sudo[3776719]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 19 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:46 nativespace-cdp sudo[3776724]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 19 04:57:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:57:51 nativespace-cdp sudo[3776789]: pam_unix(sudo:session): session closed for user root
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 19 04:57:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:57:54 nativespace-cdp sudo[3776845]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:57:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:57:54 nativespace-cdp sudo[3776851]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 19 04:57:54 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:57:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:57:55 nativespace-cdp sudo[3776857]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:57:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 19 04:57:55 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 19 04:57:55 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 19 04:57:55 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:57:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:57:56 nativespace-cdp sudo[3776867]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 19 04:58:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:58:06 nativespace-cdp sudo[3776994]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:58:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:58:06 nativespace-cdp sudo[3777000]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:58:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:58:06 nativespace-cdp sudo[3777007]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 19 04:58:06 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:58:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 04:58:06 nativespace-cdp sudo[3777013]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 04:58:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 19 04:58:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:58:08 nativespace-cdp sudo[3777053]: pam_unix(sudo:session): session closed for user root
Sep 19 04:58:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 19 04:58:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:58:08 nativespace-cdp sudo[3777058]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 19 04:59:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:01 nativespace-cdp sudo[3777208]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 19 04:59:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:02 nativespace-cdp sudo[3777227]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 19 04:59:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:03 nativespace-cdp sudo[3777234]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 19 04:59:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:04 nativespace-cdp sudo[3777239]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 19 04:59:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:04 nativespace-cdp sudo[3777246]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 19 04:59:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:07 nativespace-cdp sudo[3777260]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 19 04:59:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:07 nativespace-cdp sudo[3777268]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 19 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:14 nativespace-cdp sudo[3777337]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 19 04:59:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:17 nativespace-cdp sudo[3777393]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:59:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:17 nativespace-cdp sudo[3777400]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 19 04:59:17 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:59:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:40 nativespace-cdp sudo[3777406]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 19 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:49 nativespace-cdp sudo[3777665]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:49 nativespace-cdp sudo[3777672]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 19 04:59:49 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 04:59:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 04:59:50 nativespace-cdp sudo[3777679]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 04:59:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 19 04:59:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:52 nativespace-cdp sudo[3777716]: pam_unix(sudo:session): session closed for user root
Sep 19 04:59:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 19 04:59:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 04:59:52 nativespace-cdp sudo[3777723]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=costestimatorco WpToolkitNotification send_admin_suspicious_instance_notification 'suspicious_instance_text=The following WordPress installations are quarantined:<br/>' 'suspicious_instance_details_info=Website "Limekilns Heritage Trust" (https://limekilnspier.org.uk): Unable to finish running an operation on this site in 60 seconds. Operation was canceled. This is most likely caused by a server load spike, uncommon directives in wp-config.php, or a malware infection. Try running the operation again later. If this problem persists, make sure there are no customizations in wp-config.php that could slow down parsing this file, and consider checking the website for viruses and malware.' --output=json
Sep 19 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:53 nativespace-cdp sudo[3778097]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 19 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:53 nativespace-cdp sudo[3778104]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 19 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:53 nativespace-cdp sudo[3778109]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 19 05:00:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 19 05:00:55 nativespace-cdp sudo[3778128]: pam_unix(sudo:session): session closed for user lkpier
Sep 19 05:00:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 19 05:00:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:55 nativespace-cdp sudo[3778135]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 19 05:00:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:55 nativespace-cdp sudo[3778140]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 19 05:00:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:55 nativespace-cdp sudo[3778144]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 19 05:00:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:56 nativespace-cdp sudo[3778147]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 19 05:00:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:56 nativespace-cdp sudo[3778151]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 19 05:00:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:57 nativespace-cdp sudo[3778167]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 19 05:00:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:57 nativespace-cdp sudo[3778172]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 19 05:00:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 19 05:00:58 nativespace-cdp sudo[3778183]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 19 05:00:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 19 05:00:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:59 nativespace-cdp sudo[3778189]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 19 05:00:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:59 nativespace-cdp sudo[3778194]: pam_unix(sudo:session): session closed for user root
Sep 19 05:00:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 19 05:00:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:00:59 nativespace-cdp sudo[3778198]: pam_unix(sudo:session): session closed for user root
Sep 19 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 19 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:25 nativespace-cdp sudo[3778326]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 19 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:01:25 nativespace-cdp sudo[3778334]: pam_unix(sudo:session): session closed for user root
Sep 19 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 19 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:01:25 nativespace-cdp sudo[3778338]: pam_unix(sudo:session): session closed for user root
Sep 19 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 19 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:01:27 nativespace-cdp sudo[3778353]: pam_unix(sudo:session): session closed for user root
Sep 19 05:01:33 nativespace-cdp sshd[3778437]: Connection closed by 159.100.136.21 port 48708 [preauth]
Sep 19 05:01:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 19 05:01:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:01:34 nativespace-cdp sudo[3778455]: pam_unix(sudo:session): session closed for user root
Sep 19 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 19 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:37 nativespace-cdp sudo[3778514]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:01:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 19 05:01:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 19 05:01:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 19 05:01:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 05:01:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:38 nativespace-cdp sudo[3778523]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:01:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 19 05:01:38 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 19 05:01:38 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 19 05:01:38 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 05:01:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:52 nativespace-cdp sudo[3778530]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 19 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:59 nativespace-cdp sudo[3778696]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:59 nativespace-cdp sudo[3778702]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 19 05:01:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 19 05:01:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 05:01:59 nativespace-cdp sudo[3778708]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 19 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:01 nativespace-cdp sudo[3778747]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 19 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:02 nativespace-cdp sudo[3778764]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 19 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 19 05:02:14 nativespace-cdp sudo[3778833]: pam_unix(sudo:session): session closed for user fortunaz
Sep 19 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 19 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:15 nativespace-cdp sudo[3778839]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 19 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:15 nativespace-cdp sudo[3778849]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 19 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:15 nativespace-cdp sudo[3778854]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 19 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:18 nativespace-cdp sudo[3778875]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 19 05:02:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:18 nativespace-cdp sudo[3778880]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 19 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:24 nativespace-cdp sudo[3778942]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=costestimatorco WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Popup Maker" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.17.1. Available version: 1.20.1.<br/><br/>2. Plugin "WooCommerce" on ONE | OAR (https://oneoar.co.uk). Installed version: 8.0.2. Available version: 9.3.2.<br/><br/>3. Plugin "Popup Maker" on Pinstripe Inventories (https://pinstripe.services). Installed version: 1.18.2. Available version: 1.20.1.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/lkpier/public_html" (http://limekilnspier.org.uk): Failed to reset cache for the
Sep 19 05:02:34 nativespace-cdp sudo: wp-toolkit : (command continued) instance #11: Unable to finish running an operation on this site in 60 seconds. Operation was canceled. This is most likely caused by a server load spike, uncommon directives in wp-config.php, or a malware infection. Try running the operation again later. If this problem persists, make sure there are no customizations in wp-config.php that could slow down parsing this file, and consider checking the website for viruses and malware.<br/><br/>2. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 19 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:34 nativespace-cdp sudo[3779133]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779620]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779623]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779626]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779629]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779632]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779635]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 19 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:47 nativespace-cdp sudo[3779638]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779641]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779644]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779647]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779650]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779653]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779657]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779660]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779663]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779666]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779669]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779672]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779675]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779678]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779681]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779684]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779693]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779700]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779703]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779709]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779712]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779715]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779721]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779724]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779730]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779733]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779736]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779746]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779749]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:48 nativespace-cdp sudo[3779757]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779760]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779763]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779769]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779772]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779775]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779789]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779792]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779795]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779802]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779805]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779808]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779816]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779819]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779825]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779828]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779835]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779838]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779842]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779849]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779852]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779858]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779861]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779864]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779871]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779874]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779880]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779883]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779886]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779890]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779895]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779899]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:49 nativespace-cdp sudo[3779905]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779908]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779914]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779918]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779924]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779927]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779930]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779937]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779940]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779943]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779950]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779953]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779965]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779969]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779972]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779975]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779981]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779985]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779988]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779994]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3779997]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780000]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780005]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780009]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780018]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780021]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780027]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780030]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780033]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:50 nativespace-cdp sudo[3780039]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780042]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780048]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780051]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780054]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780061]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780064]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780072]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780075]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780078]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780084]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780087]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780090]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780098]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780101]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780104]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780112]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780115]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780119]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780125]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780128]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780131]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780135]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780138]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780141]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780144]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780147]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780150]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780153]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780156]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780159]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780162]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780165]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780168]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780171]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:51 nativespace-cdp sudo[3780174]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 19 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780177]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780180]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780183]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780186]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780189]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780192]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780195]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780198]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780201]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780204]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780207]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780210]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780213]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780216]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780219]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780223]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780226]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780229]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780232]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780235]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780238]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780242]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780245]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780248]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780251]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780254]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780257]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780260]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780263]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780266]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780269]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780272]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780275]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780278]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780281]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780284]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780287]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780290]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 19 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:52 nativespace-cdp sudo[3780293]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780296]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780299]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780302]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780305]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780308]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780311]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780314]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780317]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780320]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780323]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780326]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780329]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780332]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780335]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780338]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780341]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780344]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780347]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780350]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780354]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780357]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780360]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780363]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780366]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780369]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780372]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780375]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780378]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780381]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780384]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780387]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780390]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780393]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780396]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780400]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:53 nativespace-cdp sudo[3780403]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780406]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780409]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780412]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780415]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780418]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780421]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780424]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780427]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780430]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780433]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780436]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780439]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780442]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780445]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780448]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780451]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780454]: pam_unix(sudo:session): session closed for user root
Sep 19 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 19 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:02:54 nativespace-cdp sudo[3780457]: pam_unix(sudo:session): session closed for user root
Sep 19 05:06:34 nativespace-cdp sshd[3781192]: Connection closed by 159.100.136.21 port 57942 [preauth]
Sep 19 05:06:55 nativespace-cdp sshd[3781239]: Invalid user ftpuser from 189.45.198.38 port 55692
Sep 19 05:06:55 nativespace-cdp sshd[3781239]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 05:06:55 nativespace-cdp sshd[3781239]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:06:55 nativespace-cdp sshd[3781239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.45.198.38
Sep 19 05:06:57 nativespace-cdp sshd[3781239]: Failed password for invalid user ftpuser from 189.45.198.38 port 55692 ssh2
Sep 19 05:06:57 nativespace-cdp sshd[3781239]: Received disconnect from 189.45.198.38 port 55692:11: Bye Bye [preauth]
Sep 19 05:06:57 nativespace-cdp sshd[3781239]: Disconnected from 189.45.198.38 port 55692 [preauth]
Sep 19 05:07:17 nativespace-cdp sshd[3781296]: Invalid user elasticsearch from 41.24.95.245 port 42948
Sep 19 05:07:17 nativespace-cdp sshd[3781296]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:07:17 nativespace-cdp sshd[3781296]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:07:17 nativespace-cdp sshd[3781296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.24.95.245
Sep 19 05:07:18 nativespace-cdp sshd[3781296]: Failed password for invalid user elasticsearch from 41.24.95.245 port 42948 ssh2
Sep 19 05:07:19 nativespace-cdp sshd[3781296]: Received disconnect from 41.24.95.245 port 42948:11: Bye Bye [preauth]
Sep 19 05:07:19 nativespace-cdp sshd[3781296]: Disconnected from 41.24.95.245 port 42948 [preauth]
Sep 19 05:08:22 nativespace-cdp sshd[3781470]: Invalid user gitworker from 167.71.254.209 port 36654
Sep 19 05:08:22 nativespace-cdp sshd[3781470]: input_userauth_request: invalid user gitworker [preauth]
Sep 19 05:08:22 nativespace-cdp sshd[3781470]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:08:22 nativespace-cdp sshd[3781470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.254.209
Sep 19 05:08:24 nativespace-cdp sshd[3781470]: Failed password for invalid user gitworker from 167.71.254.209 port 36654 ssh2
Sep 19 05:08:24 nativespace-cdp sshd[3781470]: Received disconnect from 167.71.254.209 port 36654:11: Bye Bye [preauth]
Sep 19 05:08:24 nativespace-cdp sshd[3781470]: Disconnected from 167.71.254.209 port 36654 [preauth]
Sep 19 05:08:32 nativespace-cdp sshd[3781486]: Invalid user elasticsearch from 52.172.162.64 port 38776
Sep 19 05:08:32 nativespace-cdp sshd[3781486]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:08:32 nativespace-cdp sshd[3781486]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:08:32 nativespace-cdp sshd[3781486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.162.64
Sep 19 05:08:34 nativespace-cdp sshd[3781486]: Failed password for invalid user elasticsearch from 52.172.162.64 port 38776 ssh2
Sep 19 05:08:34 nativespace-cdp sshd[3781486]: Received disconnect from 52.172.162.64 port 38776:11: Bye Bye [preauth]
Sep 19 05:08:34 nativespace-cdp sshd[3781486]: Disconnected from 52.172.162.64 port 38776 [preauth]
Sep 19 05:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 05:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:50 nativespace-cdp sudo[3781710]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 05:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:50 nativespace-cdp sudo[3781713]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 05:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:50 nativespace-cdp sudo[3781716]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 05:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:50 nativespace-cdp sudo[3781721]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 05:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781724]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781731]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781734]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781737]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781741]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781744]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 05:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:52 nativespace-cdp sudo[3781747]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 05:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:54 nativespace-cdp sudo[3781755]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 05:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:54 nativespace-cdp sudo[3781759]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=burydropin user-2=fawcettd user-3=nsceres user-4=beauty user-5=eatspam user-6=darkstar user-7=dhyana user-8=sibtoncc user-9=asandcoc user-10=bwppodcast user-11=zebrapho user-12=steve user-13=cathski user-14=cambria1 user-15=reliable user-16=ninejimm user-17=pugwash user-18=howardon user-19=paulmca1 user-20=cwsocial user-21=hirefootballgame user-22=eugincou user-23=courseme user-24=nscdp user-25=health2045 user-26=fortunaz user-27=foods user-28=leftie user-29=lkpier user-30=philmcph user-31=ctedorgu user-32=firstre5 user-33=donnychicago user-34=steakbridieme user-35=isleofwi user-36=smrszyqg user-37=hidden user-38=nomistakes user-39=barbersh user-40=tigerlet user-41=attlebor user-42=lucy user-43=onlycont user-44=hodgsonmail user-45=ranxterc user-46=outdoorc user-47=branko user-48=romaldki
Sep 19 05:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=chrisdal user-52=mcdermos user-53=nbhavers user-54=careers user-55=david user-56=oubpgvbx user-57=tstardom user-58=what user-59=cath user-60=sketchy user-61=havantho user-62=nvihkvu user-63=ladburyp user-64=stagingerris user-65=dancinggardener user-66=kategilpin user-67=design user-68=nove user-69=boldover user-70=bakery user-71=sosevalu user-72=crrtipdl user-73=jarvisin user-74=spectrum user-75=theblack user-76=hodgesonweb user-77=still user-78=agproduc user-79=stephani user-80=leereyn1 user-81=markward user-82=booff user-83=foundation user-84=connect9 user-85=athenare user-86=vantagep user-87=maflemin user-88=lbscrmod user-89=ulsukarm user-90=martsblo user-91=dickemery123 user-92=ptkxhsbt user-93=lbhyisi user-94=hhdugcor user-95=magichat user-96=lakesan1 user-97=brmrjxl user-98=strathar user-99=sarafoundation user-100=atestord user-101=wilsonsw user-102=musorguk
Sep 19 05:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=megacards user-104=milloyco user-105=gilpin user-106=elecleis user-107=hubmaster user-108=carsinyo user-109=fetch user-110=accooper user-111=ianrayne user-112=connectedshoppin user-113=thqkgnbz user-114=jonhartl user-115=seftvta user-116=ultbcrra user-117=firstres user-118=opaiscyx user-119=coursemc user-120=firstrel user-121=clarkass user-122=costestimatorco user-123=firstred user-124=southlon user-125=highlegh user-126=skyfirec user-127=alexadmin user-128=innovat1 user-129=askhform user-130=stuartge user-131=nativene user-132=brighto1 user-133=nstriton user-134=firstre2 user-135=vivienn1 user-136=battlere user-137=oneoarco user-138=bedfords user-139=ggaaorgu user-140=belle user-141=newstoda user-142=bemadonn feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 05:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 05:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:55 nativespace-cdp sudo[3781768]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:55 nativespace-cdp sudo[3781801]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-P0I4oT9j1te0mjGK.~
Sep 19 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:55 nativespace-cdp sudo[3781805]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-P0I4oT9j1te0mjGK.~'
Sep 19 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:55 nativespace-cdp sudo[3781810]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-P0I4oT9j1te0mjGK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:55 nativespace-cdp sudo[3781816]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 05:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:55 nativespace-cdp sudo[3781820]: pam_unix(sudo:session): session closed for user root
Sep 19 05:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 05:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:09:57 nativespace-cdp sudo[3781886]: pam_unix(sudo:session): session closed for user root
Sep 19 05:10:16 nativespace-cdp sshd[3782098]: Invalid user lsfadmin from 94.156.67.110 port 58162
Sep 19 05:10:16 nativespace-cdp sshd[3782098]: input_userauth_request: invalid user lsfadmin [preauth]
Sep 19 05:10:16 nativespace-cdp sshd[3782098]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:10:16 nativespace-cdp sshd[3782098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.156.67.110
Sep 19 05:10:19 nativespace-cdp sshd[3782098]: Failed password for invalid user lsfadmin from 94.156.67.110 port 58162 ssh2
Sep 19 05:10:19 nativespace-cdp sshd[3782098]: Received disconnect from 94.156.67.110 port 58162:11: Bye Bye [preauth]
Sep 19 05:10:19 nativespace-cdp sshd[3782098]: Disconnected from 94.156.67.110 port 58162 [preauth]
Sep 19 05:10:34 nativespace-cdp sshd[3782145]: Invalid user elasticsearch from 41.196.0.14 port 56192
Sep 19 05:10:34 nativespace-cdp sshd[3782145]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:10:34 nativespace-cdp sshd[3782145]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:10:34 nativespace-cdp sshd[3782145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.0.14
Sep 19 05:10:36 nativespace-cdp sshd[3782145]: Failed password for invalid user elasticsearch from 41.196.0.14 port 56192 ssh2
Sep 19 05:10:36 nativespace-cdp sshd[3782145]: Received disconnect from 41.196.0.14 port 56192:11: Bye Bye [preauth]
Sep 19 05:10:36 nativespace-cdp sshd[3782145]: Disconnected from 41.196.0.14 port 56192 [preauth]
Sep 19 05:11:33 nativespace-cdp sshd[3782274]: Connection closed by 159.100.136.21 port 37716 [preauth]
Sep 19 05:12:28 nativespace-cdp sshd[3782393]: Invalid user support from 164.90.153.71 port 48870
Sep 19 05:12:28 nativespace-cdp sshd[3782393]: input_userauth_request: invalid user support [preauth]
Sep 19 05:12:28 nativespace-cdp sshd[3782393]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:12:28 nativespace-cdp sshd[3782393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.153.71
Sep 19 05:12:30 nativespace-cdp sshd[3782393]: Failed password for invalid user support from 164.90.153.71 port 48870 ssh2
Sep 19 05:12:30 nativespace-cdp sshd[3782393]: Received disconnect from 164.90.153.71 port 48870:11: Bye Bye [preauth]
Sep 19 05:12:30 nativespace-cdp sshd[3782393]: Disconnected from 164.90.153.71 port 48870 [preauth]
Sep 19 05:12:44 nativespace-cdp sshd[3782444]: Invalid user elasticsearch from 167.71.254.209 port 53110
Sep 19 05:12:44 nativespace-cdp sshd[3782444]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:12:44 nativespace-cdp sshd[3782444]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:12:44 nativespace-cdp sshd[3782444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.254.209
Sep 19 05:12:46 nativespace-cdp sshd[3782444]: Failed password for invalid user elasticsearch from 167.71.254.209 port 53110 ssh2
Sep 19 05:12:51 nativespace-cdp sshd[3782444]: Received disconnect from 167.71.254.209 port 53110:11: Bye Bye [preauth]
Sep 19 05:12:51 nativespace-cdp sshd[3782444]: Disconnected from 167.71.254.209 port 53110 [preauth]
Sep 19 05:12:53 nativespace-cdp sshd[3782464]: Invalid user user01 from 94.156.67.110 port 51196
Sep 19 05:12:53 nativespace-cdp sshd[3782464]: input_userauth_request: invalid user user01 [preauth]
Sep 19 05:12:53 nativespace-cdp sshd[3782464]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:12:53 nativespace-cdp sshd[3782464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.156.67.110
Sep 19 05:12:55 nativespace-cdp sshd[3782464]: Failed password for invalid user user01 from 94.156.67.110 port 51196 ssh2
Sep 19 05:12:55 nativespace-cdp sshd[3782464]: Received disconnect from 94.156.67.110 port 51196:11: Bye Bye [preauth]
Sep 19 05:12:55 nativespace-cdp sshd[3782464]: Disconnected from 94.156.67.110 port 51196 [preauth]
Sep 19 05:12:55 nativespace-cdp sshd[3782468]: Invalid user user from 189.45.198.38 port 40026
Sep 19 05:12:55 nativespace-cdp sshd[3782468]: input_userauth_request: invalid user user [preauth]
Sep 19 05:12:55 nativespace-cdp sshd[3782468]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:12:55 nativespace-cdp sshd[3782468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.45.198.38
Sep 19 05:12:58 nativespace-cdp sshd[3782468]: Failed password for invalid user user from 189.45.198.38 port 40026 ssh2
Sep 19 05:12:59 nativespace-cdp sshd[3782468]: Received disconnect from 189.45.198.38 port 40026:11: Bye Bye [preauth]
Sep 19 05:12:59 nativespace-cdp sshd[3782468]: Disconnected from 189.45.198.38 port 40026 [preauth]
Sep 19 05:13:03 nativespace-cdp sshd[3782505]: Invalid user lsfadmin from 41.196.0.14 port 58762
Sep 19 05:13:03 nativespace-cdp sshd[3782505]: input_userauth_request: invalid user lsfadmin [preauth]
Sep 19 05:13:03 nativespace-cdp sshd[3782505]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:03 nativespace-cdp sshd[3782505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.0.14
Sep 19 05:13:03 nativespace-cdp sshd[3782508]: Invalid user support from 52.172.162.64 port 35564
Sep 19 05:13:03 nativespace-cdp sshd[3782508]: input_userauth_request: invalid user support [preauth]
Sep 19 05:13:03 nativespace-cdp sshd[3782508]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:03 nativespace-cdp sshd[3782508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.162.64
Sep 19 05:13:05 nativespace-cdp sshd[3782505]: Failed password for invalid user lsfadmin from 41.196.0.14 port 58762 ssh2
Sep 19 05:13:05 nativespace-cdp sshd[3782505]: Received disconnect from 41.196.0.14 port 58762:11: Bye Bye [preauth]
Sep 19 05:13:05 nativespace-cdp sshd[3782505]: Disconnected from 41.196.0.14 port 58762 [preauth]
Sep 19 05:13:06 nativespace-cdp sshd[3782508]: Failed password for invalid user support from 52.172.162.64 port 35564 ssh2
Sep 19 05:13:06 nativespace-cdp sshd[3782508]: Received disconnect from 52.172.162.64 port 35564:11: Bye Bye [preauth]
Sep 19 05:13:06 nativespace-cdp sshd[3782508]: Disconnected from 52.172.162.64 port 35564 [preauth]
Sep 19 05:13:26 nativespace-cdp sshd[3782550]: Invalid user ts3 from 167.71.254.209 port 35108
Sep 19 05:13:26 nativespace-cdp sshd[3782550]: input_userauth_request: invalid user ts3 [preauth]
Sep 19 05:13:26 nativespace-cdp sshd[3782550]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:26 nativespace-cdp sshd[3782550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.254.209
Sep 19 05:13:29 nativespace-cdp sshd[3782550]: Failed password for invalid user ts3 from 167.71.254.209 port 35108 ssh2
Sep 19 05:13:29 nativespace-cdp sshd[3782550]: Received disconnect from 167.71.254.209 port 35108:11: Bye Bye [preauth]
Sep 19 05:13:29 nativespace-cdp sshd[3782550]: Disconnected from 167.71.254.209 port 35108 [preauth]
Sep 19 05:13:32 nativespace-cdp sshd[3782588]: Invalid user elasticsearch from 94.156.67.110 port 58604
Sep 19 05:13:32 nativespace-cdp sshd[3782588]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:13:32 nativespace-cdp sshd[3782588]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:32 nativespace-cdp sshd[3782588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.156.67.110
Sep 19 05:13:33 nativespace-cdp sshd[3782592]: Invalid user web-user from 164.90.153.71 port 54388
Sep 19 05:13:33 nativespace-cdp sshd[3782592]: input_userauth_request: invalid user web-user [preauth]
Sep 19 05:13:33 nativespace-cdp sshd[3782592]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:33 nativespace-cdp sshd[3782592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.153.71
Sep 19 05:13:34 nativespace-cdp sshd[3782588]: Failed password for invalid user elasticsearch from 94.156.67.110 port 58604 ssh2
Sep 19 05:13:34 nativespace-cdp sshd[3782592]: Failed password for invalid user web-user from 164.90.153.71 port 54388 ssh2
Sep 19 05:13:34 nativespace-cdp sshd[3782592]: Received disconnect from 164.90.153.71 port 54388:11: Bye Bye [preauth]
Sep 19 05:13:34 nativespace-cdp sshd[3782592]: Disconnected from 164.90.153.71 port 54388 [preauth]
Sep 19 05:13:45 nativespace-cdp sshd[3782659]: Invalid user john from 41.196.0.14 port 53014
Sep 19 05:13:45 nativespace-cdp sshd[3782659]: input_userauth_request: invalid user john [preauth]
Sep 19 05:13:45 nativespace-cdp sshd[3782659]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:45 nativespace-cdp sshd[3782659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.0.14
Sep 19 05:13:46 nativespace-cdp sshd[3782668]: Invalid user john from 52.172.162.64 port 41852
Sep 19 05:13:46 nativespace-cdp sshd[3782668]: input_userauth_request: invalid user john [preauth]
Sep 19 05:13:46 nativespace-cdp sshd[3782668]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:46 nativespace-cdp sshd[3782668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.162.64
Sep 19 05:13:47 nativespace-cdp sshd[3782659]: Failed password for invalid user john from 41.196.0.14 port 53014 ssh2
Sep 19 05:13:48 nativespace-cdp sshd[3782668]: Failed password for invalid user john from 52.172.162.64 port 41852 ssh2
Sep 19 05:13:50 nativespace-cdp sshd[3782668]: Received disconnect from 52.172.162.64 port 41852:11: Bye Bye [preauth]
Sep 19 05:13:50 nativespace-cdp sshd[3782668]: Disconnected from 52.172.162.64 port 41852 [preauth]
Sep 19 05:13:51 nativespace-cdp sshd[3782659]: Received disconnect from 41.196.0.14 port 53014:11: Bye Bye [preauth]
Sep 19 05:13:51 nativespace-cdp sshd[3782659]: Disconnected from 41.196.0.14 port 53014 [preauth]
Sep 19 05:13:54 nativespace-cdp sshd[3782693]: Invalid user ftpuser from 41.24.95.245 port 40334
Sep 19 05:13:54 nativespace-cdp sshd[3782693]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 05:13:54 nativespace-cdp sshd[3782693]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:54 nativespace-cdp sshd[3782693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.24.95.245
Sep 19 05:13:56 nativespace-cdp sshd[3782693]: Failed password for invalid user ftpuser from 41.24.95.245 port 40334 ssh2
Sep 19 05:13:56 nativespace-cdp sshd[3782693]: Received disconnect from 41.24.95.245 port 40334:11: Bye Bye [preauth]
Sep 19 05:13:56 nativespace-cdp sshd[3782693]: Disconnected from 41.24.95.245 port 40334 [preauth]
Sep 19 05:13:56 nativespace-cdp sshd[3782665]: Invalid user elasticsearch from 189.45.198.38 port 50882
Sep 19 05:13:56 nativespace-cdp sshd[3782665]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:13:56 nativespace-cdp sshd[3782665]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:13:56 nativespace-cdp sshd[3782665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.45.198.38
Sep 19 05:13:58 nativespace-cdp sshd[3782665]: Failed password for invalid user elasticsearch from 189.45.198.38 port 50882 ssh2
Sep 19 05:13:58 nativespace-cdp sshd[3782665]: Received disconnect from 189.45.198.38 port 50882:11: Bye Bye [preauth]
Sep 19 05:13:58 nativespace-cdp sshd[3782665]: Disconnected from 189.45.198.38 port 50882 [preauth]
Sep 19 05:14:37 nativespace-cdp sshd[3782866]: Invalid user ts3 from 41.24.95.245 port 49156
Sep 19 05:14:37 nativespace-cdp sshd[3782866]: input_userauth_request: invalid user ts3 [preauth]
Sep 19 05:14:37 nativespace-cdp sshd[3782866]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:14:37 nativespace-cdp sshd[3782866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.24.95.245
Sep 19 05:14:39 nativespace-cdp sshd[3782866]: Failed password for invalid user ts3 from 41.24.95.245 port 49156 ssh2
Sep 19 05:15:27 nativespace-cdp sshd[3783202]: Invalid user elasticsearch from 164.90.153.71 port 39610
Sep 19 05:15:27 nativespace-cdp sshd[3783202]: input_userauth_request: invalid user elasticsearch [preauth]
Sep 19 05:15:27 nativespace-cdp sshd[3783202]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 05:15:27 nativespace-cdp sshd[3783202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.153.71
Sep 19 05:15:29 nativespace-cdp sshd[3783202]: Failed password for invalid user elasticsearch from 164.90.153.71 port 39610 ssh2
Sep 19 05:16:33 nativespace-cdp sshd[3783440]: Connection closed by 159.100.136.21 port 47250 [preauth]
Sep 19 05:21:33 nativespace-cdp sshd[3784946]: Connection closed by 159.100.136.21 port 56384 [preauth]
Sep 19 05:26:33 nativespace-cdp sshd[3785939]: Connection closed by 159.100.136.21 port 37144 [preauth]
Sep 19 05:31:35 nativespace-cdp sshd[3786982]: Connection closed by 159.100.136.21 port 46214 [preauth]
Sep 19 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user brighto1 by (uid=0)
Sep 19 05:35:09 nativespace-cdp su[3787754]: pam_unix(su:session): session closed for user brighto1
Sep 19 05:36:33 nativespace-cdp sshd[3788069]: Connection closed by 159.100.136.21 port 55468 [preauth]
Sep 19 05:41:33 nativespace-cdp sshd[3789566]: Connection closed by 159.100.136.21 port 36558 [preauth]
Sep 19 05:46:33 nativespace-cdp sshd[3790597]: Connection closed by 159.100.136.21 port 46318 [preauth]
Sep 19 05:51:33 nativespace-cdp sshd[3792117]: Connection closed by 159.100.136.21 port 55770 [preauth]
Sep 19 05:52:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 05:52:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 05:52:02 nativespace-cdp sudo[3792208]: pam_unix(sudo:session): session closed for user root
Sep 19 05:56:34 nativespace-cdp sshd[3793091]: Connection closed by 159.100.136.21 port 37158 [preauth]
Sep 19 06:01:33 nativespace-cdp sshd[3794126]: Connection closed by 159.100.136.21 port 46538 [preauth]
Sep 19 06:04:33 nativespace-cdp sshd[3794690]: Invalid user sammy from 172.174.5.146 port 34556
Sep 19 06:04:33 nativespace-cdp sshd[3794690]: input_userauth_request: invalid user sammy [preauth]
Sep 19 06:04:34 nativespace-cdp sshd[3794690]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 06:04:34 nativespace-cdp sshd[3794690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.5.146
Sep 19 06:04:36 nativespace-cdp sshd[3794690]: Failed password for invalid user sammy from 172.174.5.146 port 34556 ssh2
Sep 19 06:04:36 nativespace-cdp sshd[3794690]: Received disconnect from 172.174.5.146 port 34556:11: Bye Bye [preauth]
Sep 19 06:04:36 nativespace-cdp sshd[3794690]: Disconnected from 172.174.5.146 port 34556 [preauth]
Sep 19 06:06:33 nativespace-cdp sshd[3795241]: Connection closed by 159.100.136.21 port 56326 [preauth]
Sep 19 06:08:27 nativespace-cdp sshd[3795912]: Invalid user sammy from 172.174.5.146 port 55023
Sep 19 06:08:27 nativespace-cdp sshd[3795912]: input_userauth_request: invalid user sammy [preauth]
Sep 19 06:08:27 nativespace-cdp sshd[3795912]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 06:08:27 nativespace-cdp sshd[3795912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.5.146
Sep 19 06:08:30 nativespace-cdp sshd[3795912]: Failed password for invalid user sammy from 172.174.5.146 port 55023 ssh2
Sep 19 06:08:30 nativespace-cdp sshd[3795912]: Received disconnect from 172.174.5.146 port 55023:11: Bye Bye [preauth]
Sep 19 06:08:30 nativespace-cdp sshd[3795912]: Disconnected from 172.174.5.146 port 55023 [preauth]
Sep 19 06:09:14 nativespace-cdp sshd[3796461]: Invalid user sammy from 172.174.5.146 port 62458
Sep 19 06:09:14 nativespace-cdp sshd[3796461]: input_userauth_request: invalid user sammy [preauth]
Sep 19 06:09:14 nativespace-cdp sshd[3796461]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 06:09:14 nativespace-cdp sshd[3796461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.5.146
Sep 19 06:09:17 nativespace-cdp sshd[3796461]: Failed password for invalid user sammy from 172.174.5.146 port 62458 ssh2
Sep 19 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:50 nativespace-cdp sudo[3796880]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:50 nativespace-cdp sudo[3796884]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 06:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:51 nativespace-cdp sudo[3796889]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:51 nativespace-cdp sudo[3796898]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 06:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796904]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796923]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796928]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796932]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796937]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796942]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 06:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:53 nativespace-cdp sudo[3796948]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:55 nativespace-cdp sudo[3796973]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 06:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:56 nativespace-cdp sudo[3796982]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dickemery123 user-2=ptkxhsbt user-3=martsblo user-4=magichat user-5=hhdugcor user-6=lbhyisi user-7=strathar user-8=atestord user-9=sarafoundation user-10=lakesan1 user-11=brmrjxl user-12=megacards user-13=musorguk user-14=wilsonsw user-15=spectrum user-16=hodgesonweb user-17=theblack user-18=jarvisin user-19=stephani user-20=leereyn1 user-21=agproduc user-22=still user-23=vantagep user-24=athenare user-25=connect9 user-26=lbscrmod user-27=maflemin user-28=markward user-29=foundation user-30=booff user-31=ulsukarm user-32=alexadmin user-33=skyfirec user-34=nativene user-35=innovat1 user-36=stuartge user-37=askhform user-38=vivienn1 user-39=firstre2 user-40=oneoarco user-41=battlere user-42=nstriton user-43=brighto1 user-44=newstoda user-45=belle user-46=ggaaorgu user-47=bemadonn user-48=bedfords
Sep 19 06:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hubmaster user-50=fetch user-51=carsinyo user-52=milloyco user-53=gilpin user-54=elecleis user-55=connectedshoppin user-56=thqkgnbz user-57=accooper user-58=ianrayne user-59=coursemc user-60=opaiscyx user-61=ultbcrra user-62=jonhartl user-63=seftvta user-64=firstres user-65=firstred user-66=highlegh user-67=southlon user-68=clarkass user-69=firstrel user-70=costestimatorco user-71=cwsocial user-72=paulmca1 user-73=howardon user-74=pugwash user-75=cambria1 user-76=cathski user-77=ninejimm user-78=reliable user-79=eugincou user-80=courseme user-81=hirefootballgame user-82=lkpier user-83=steakbridieme user-84=firstre5 user-85=donnychicago user-86=philmcph user-87=ctedorgu user-88=nscdp user-89=foods user-90=leftie user-91=health2045 user-92=fortunaz user-93=nomistakes user-94=hidden user-95=barbersh user-96=tigerlet user-97=smrszyqg user-98=isleofwi user-99=nsceres user-100=fawcettd user-101=burydropin
Sep 19 06:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=beauty user-104=darkstar user-105=eatspam user-106=asandcoc user-107=sibtoncc user-108=steve user-109=bwppodcast user-110=zebrapho user-111=havantho user-112=cath user-113=sketchy user-114=nvihkvu user-115=tstardom user-116=oubpgvbx user-117=what user-118=design user-119=stagingerris user-120=dancinggardener user-121=ladburyp user-122=kategilpin user-123=boldover user-124=nove user-125=bakery user-126=crrtipdl user-127=sosevalu user-128=onlycont user-129=lucy user-130=attlebor user-131=romaldki user-132=outdoorc user-133=ranxterc user-134=hodgsonmail user-135=branko user-136=jennimil user-137=tomandle user-138=david user-139=nbhavers user-140=careers user-141=chrisdal user-142=mcdermos feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 06:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 06:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:56 nativespace-cdp sudo[3796994]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 06:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:57 nativespace-cdp sudo[3797021]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6q7iZdbK62sQ9UA3.~
Sep 19 06:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:57 nativespace-cdp sudo[3797027]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6q7iZdbK62sQ9UA3.~'
Sep 19 06:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:57 nativespace-cdp sudo[3797032]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6q7iZdbK62sQ9UA3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 06:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:57 nativespace-cdp sudo[3797039]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 06:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:57 nativespace-cdp sudo[3797044]: pam_unix(sudo:session): session closed for user root
Sep 19 06:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 06:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 06:09:59 nativespace-cdp sudo[3797087]: pam_unix(sudo:session): session closed for user root
Sep 19 06:11:34 nativespace-cdp sshd[3798092]: Connection closed by 159.100.136.21 port 37196 [preauth]
Sep 19 06:16:33 nativespace-cdp sshd[3799450]: Connection closed by 159.100.136.21 port 46786 [preauth]
Sep 19 06:21:34 nativespace-cdp sshd[3801103]: Connection closed by 159.100.136.21 port 55850 [preauth]
Sep 19 06:26:34 nativespace-cdp sshd[3802078]: Connection closed by 159.100.136.21 port 36868 [preauth]
Sep 19 06:31:33 nativespace-cdp sshd[3803155]: Connection closed by 159.100.136.21 port 45286 [preauth]
Sep 19 06:36:38 nativespace-cdp sshd[3804739]: Connection closed by 159.100.136.21 port 53606 [preauth]
Sep 19 06:41:34 nativespace-cdp sshd[3805790]: Connection closed by 159.100.136.21 port 34078 [preauth]
Sep 19 06:46:33 nativespace-cdp sshd[3806866]: Connection closed by 159.100.136.21 port 43164 [preauth]
Sep 19 06:51:33 nativespace-cdp sshd[3808076]: Connection closed by 159.100.136.21 port 52262 [preauth]
Sep 19 06:56:36 nativespace-cdp sshd[3809470]: Connection closed by 159.100.136.21 port 33544 [preauth]
Sep 19 07:01:33 nativespace-cdp sshd[3810553]: Connection closed by 159.100.136.21 port 42870 [preauth]
Sep 19 07:06:06 nativespace-cdp sshd[3811639]: Accepted publickey for root from 185.67.178.249 port 44760 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 19 07:06:06 nativespace-cdp sshd[3811639]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 19 07:06:36 nativespace-cdp sshd[3811843]: Connection closed by 159.100.136.21 port 52232 [preauth]
Sep 19 07:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 07:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:09:57 nativespace-cdp sudo[3812806]: pam_unix(sudo:session): session closed for user root
Sep 19 07:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 07:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:09:57 nativespace-cdp sudo[3812809]: pam_unix(sudo:session): session closed for user root
Sep 19 07:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 07:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:09:58 nativespace-cdp sudo[3812812]: pam_unix(sudo:session): session closed for user root
Sep 19 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:09:58 nativespace-cdp sudo[3812817]: pam_unix(sudo:session): session closed for user root
Sep 19 07:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 07:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812820]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 07:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812919]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 07:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812931]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 07:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812937]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 07:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812941]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 07:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812945]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 07:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:02 nativespace-cdp sudo[3812950]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 07:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:10 nativespace-cdp sudo[3813045]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:11 nativespace-cdp sudo[3813049]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=spectrum user-3=hodgesonweb user-4=theblack user-5=still user-6=agproduc user-7=stephani user-8=leereyn1 user-9=markward user-10=booff user-11=foundation user-12=athenare user-13=connect9 user-14=vantagep user-15=maflemin user-16=lbscrmod user-17=ulsukarm user-18=martsblo user-19=dickemery123 user-20=ptkxhsbt user-21=lbhyisi user-22=hhdugcor user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=strathar user-27=sarafoundation user-28=atestord user-29=wilsonsw user-30=musorguk user-31=megacards user-32=gilpin user-33=milloyco user-34=elecleis user-35=hubmaster user-36=carsinyo user-37=fetch user-38=accooper user-39=ianrayne user-40=connectedshoppin user-41=thqkgnbz user-42=jonhartl user-43=seftvta user-44=ultbcrra user-45=firstres user-46=coursemc user-47=opaiscyx
Sep 19 07:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=clarkass user-49=firstrel user-50=costestimatorco user-51=firstred user-52=southlon user-53=highlegh user-54=skyfirec user-55=alexadmin user-56=innovat1 user-57=askhform user-58=stuartge user-59=nativene user-60=brighto1 user-61=nstriton user-62=firstre2 user-63=vivienn1 user-64=battlere user-65=oneoarco user-66=bedfords user-67=belle user-68=ggaaorgu user-69=newstoda user-70=bemadonn user-71=burydropin user-72=fawcettd user-73=nsceres user-74=beauty user-75=eatspam user-76=darkstar user-77=dhyana user-78=sibtoncc user-79=asandcoc user-80=bwppodcast user-81=zebrapho user-82=steve user-83=cambria1 user-84=cathski user-85=reliable user-86=ninejimm user-87=howardon user-88=paulmca1 user-89=pugwash user-90=cwsocial user-91=hirefootballgame user-92=eugincou user-93=courseme user-94=nscdp user-95=health2045 user-96=fortunaz user-97=foods user-98=leftie user-99=lkpier user-100=philmcph user-101=ctedorgu
Sep 19 07:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=steakbridieme user-103=firstre5 user-104=donnychicago user-105=smrszyqg user-106=isleofwi user-107=hidden user-108=nomistakes user-109=tigerlet user-110=barbersh user-111=attlebor user-112=lucy user-113=onlycont user-114=ranxterc user-115=outdoorc user-116=hodgsonmail user-117=branko user-118=romaldki user-119=tomandle user-120=jennimil user-121=chrisdal user-122=mcdermos user-123=careers user-124=nbhavers user-125=david user-126=oubpgvbx user-127=tstardom user-128=what user-129=cath user-130=sketchy user-131=havantho user-132=nvihkvu user-133=ladburyp user-134=stagingerris user-135=dancinggardener user-136=kategilpin user-137=design user-138=nove user-139=boldover user-140=bakery user-141=sosevalu user-142=crrtipdl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 19 07:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:12 nativespace-cdp sudo[3813056]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 07:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:13 nativespace-cdp sudo[3813062]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CmkALycbivyXpNAm.~
Sep 19 07:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:13 nativespace-cdp sudo[3813065]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CmkALycbivyXpNAm.~'
Sep 19 07:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:13 nativespace-cdp sudo[3813068]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CmkALycbivyXpNAm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 07:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:13 nativespace-cdp sudo[3813072]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 07:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:13 nativespace-cdp sudo[3813075]: pam_unix(sudo:session): session closed for user root
Sep 19 07:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 07:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 07:10:15 nativespace-cdp sudo[3813098]: pam_unix(sudo:session): session closed for user root
Sep 19 07:11:33 nativespace-cdp sshd[3813368]: Connection closed by 159.100.136.21 port 32912 [preauth]
Sep 19 07:16:36 nativespace-cdp sshd[3814448]: Connection closed by 159.100.136.21 port 42356 [preauth]
Sep 19 07:21:33 nativespace-cdp sshd[3816012]: Connection closed by 159.100.136.21 port 51506 [preauth]
Sep 19 07:26:35 nativespace-cdp sshd[3816981]: Connection closed by 159.100.136.21 port 32866 [preauth]
Sep 19 07:31:33 nativespace-cdp sshd[3818106]: Connection closed by 159.100.136.21 port 42016 [preauth]
Sep 19 07:36:33 nativespace-cdp sshd[3819657]: Connection closed by 159.100.136.21 port 51604 [preauth]
Sep 19 07:41:33 nativespace-cdp sshd[3820776]: Connection closed by 159.100.136.21 port 60648 [preauth]
Sep 19 07:46:36 nativespace-cdp sshd[3821870]: Connection closed by 159.100.136.21 port 42034 [preauth]
Sep 19 07:51:33 nativespace-cdp sshd[3823445]: Connection closed by 159.100.136.21 port 51600 [preauth]
Sep 19 07:56:33 nativespace-cdp sshd[3824506]: Connection closed by 159.100.136.21 port 60602 [preauth]
Sep 19 08:01:33 nativespace-cdp sshd[3825704]: Connection closed by 159.100.136.21 port 41368 [preauth]
Sep 19 08:06:33 nativespace-cdp sshd[3827515]: Connection closed by 159.100.136.21 port 51296 [preauth]
Sep 19 08:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 08:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:51 nativespace-cdp sudo[3828204]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 08:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:51 nativespace-cdp sudo[3828207]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 08:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:52 nativespace-cdp sudo[3828210]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 08:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:52 nativespace-cdp sudo[3828215]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 08:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828218]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828241]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828244]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828247]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828250]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828254]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:55 nativespace-cdp sudo[3828257]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:57 nativespace-cdp sudo[3828264]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:57 nativespace-cdp sudo[3828268]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=brmrjxl user-2=lakesan1 user-3=atestord user-4=sarafoundation user-5=strathar user-6=wilsonsw user-7=megacards user-8=musorguk user-9=martsblo user-10=ptkxhsbt user-11=dickemery123 user-12=hhdugcor user-13=lbhyisi user-14=magichat user-15=markward user-16=booff user-17=foundation user-18=lbscrmod user-19=maflemin user-20=vantagep user-21=connect9 user-22=athenare user-23=ulsukarm user-24=jarvisin user-25=theblack user-26=hodgesonweb user-27=spectrum user-28=agproduc user-29=still user-30=leereyn1 user-31=stephani user-32=nstriton user-33=brighto1 user-34=oneoarco user-35=battlere user-36=vivienn1 user-37=firstre2 user-38=bedfords user-39=bemadonn user-40=newstoda user-41=belle user-42=ggaaorgu user-43=skyfirec user-44=alexadmin user-45=stuartge user-46=askhform user-47=innovat1 user-48=nativene
Sep 19 08:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstres user-50=ultbcrra user-51=jonhartl user-52=seftvta user-53=coursemc user-54=opaiscyx user-55=costestimatorco user-56=firstrel user-57=clarkass user-58=highlegh user-59=southlon user-60=firstred user-61=elecleis user-62=gilpin user-63=milloyco user-64=fetch user-65=carsinyo user-66=hubmaster user-67=ianrayne user-68=accooper user-69=thqkgnbz user-70=connectedshoppin user-71=foods user-72=leftie user-73=health2045 user-74=fortunaz user-75=nscdp user-76=steakbridieme user-77=firstre5 user-78=donnychicago user-79=ctedorgu user-80=philmcph user-81=lkpier user-82=smrszyqg user-83=isleofwi user-84=tigerlet user-85=barbersh user-86=nomistakes user-87=hidden user-88=reliable user-89=ninejimm user-90=cambria1 user-91=cathski user-92=cwsocial user-93=howardon user-94=pugwash user-95=paulmca1 user-96=hirefootballgame user-97=courseme user-98=eugincou user-99=asandcoc user-100=sibtoncc user-101=zebrapho
Sep 19 08:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=steve user-104=fawcettd user-105=burydropin user-106=nsceres user-107=darkstar user-108=eatspam user-109=beauty user-110=dhyana user-111=nove user-112=boldover user-113=crrtipdl user-114=sosevalu user-115=bakery user-116=what user-117=oubpgvbx user-118=tstardom user-119=nvihkvu user-120=havantho user-121=cath user-122=sketchy user-123=kategilpin user-124=stagingerris user-125=dancinggardener user-126=ladburyp user-127=design user-128=tomandle user-129=jennimil user-130=mcdermos user-131=chrisdal user-132=david user-133=careers user-134=nbhavers user-135=lucy user-136=attlebor user-137=onlycont user-138=branko user-139=hodgsonmail user-140=ranxterc user-141=outdoorc user-142=romaldki feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 08:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:58 nativespace-cdp sudo[3828275]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:59 nativespace-cdp sudo[3828289]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FqVN2KwM2maKDzZk.~
Sep 19 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:59 nativespace-cdp sudo[3828292]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FqVN2KwM2maKDzZk.~'
Sep 19 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:59 nativespace-cdp sudo[3828295]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FqVN2KwM2maKDzZk.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:59 nativespace-cdp sudo[3828300]: pam_unix(sudo:session): session closed for user root
Sep 19 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:09:59 nativespace-cdp sudo[3828303]: pam_unix(sudo:session): session closed for user root
Sep 19 08:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 08:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 08:10:16 nativespace-cdp sudo[3828485]: pam_unix(sudo:session): session closed for user root
Sep 19 08:11:33 nativespace-cdp sshd[3828831]: Connection closed by 159.100.136.21 port 60638 [preauth]
Sep 19 08:16:36 nativespace-cdp sshd[3829952]: Connection closed by 159.100.136.21 port 42106 [preauth]
Sep 19 08:21:33 nativespace-cdp sshd[3831556]: Connection closed by 159.100.136.21 port 51536 [preauth]
Sep 19 08:25:42 nativespace-cdp sshd[3832471]: Invalid user dev from 159.223.192.90 port 40962
Sep 19 08:25:42 nativespace-cdp sshd[3832471]: input_userauth_request: invalid user dev [preauth]
Sep 19 08:25:42 nativespace-cdp sshd[3832471]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:25:42 nativespace-cdp sshd[3832471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.192.90
Sep 19 08:25:44 nativespace-cdp sshd[3832471]: Failed password for invalid user dev from 159.223.192.90 port 40962 ssh2
Sep 19 08:25:45 nativespace-cdp sshd[3832471]: Received disconnect from 159.223.192.90 port 40962:11: Bye Bye [preauth]
Sep 19 08:25:45 nativespace-cdp sshd[3832471]: Disconnected from 159.223.192.90 port 40962 [preauth]
Sep 19 08:25:53 nativespace-cdp sshd[3832540]: Invalid user erpnext from 222.253.40.231 port 39576
Sep 19 08:25:53 nativespace-cdp sshd[3832540]: input_userauth_request: invalid user erpnext [preauth]
Sep 19 08:25:53 nativespace-cdp sshd[3832540]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:25:53 nativespace-cdp sshd[3832540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.40.231
Sep 19 08:25:55 nativespace-cdp sshd[3832540]: Failed password for invalid user erpnext from 222.253.40.231 port 39576 ssh2
Sep 19 08:25:56 nativespace-cdp sshd[3832540]: Received disconnect from 222.253.40.231 port 39576:11: Bye Bye [preauth]
Sep 19 08:25:56 nativespace-cdp sshd[3832540]: Disconnected from 222.253.40.231 port 39576 [preauth]
Sep 19 08:26:26 nativespace-cdp sshd[3832692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.17  user=root
Sep 19 08:26:26 nativespace-cdp sshd[3832692]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:26:28 nativespace-cdp sshd[3832692]: Failed password for root from 194.152.206.17 port 16160 ssh2
Sep 19 08:26:28 nativespace-cdp sshd[3832692]: Received disconnect from 194.152.206.17 port 16160:11: Bye Bye [preauth]
Sep 19 08:26:28 nativespace-cdp sshd[3832692]: Disconnected from 194.152.206.17 port 16160 [preauth]
Sep 19 08:26:34 nativespace-cdp sshd[3832799]: Connection closed by 159.100.136.21 port 33066 [preauth]
Sep 19 08:26:58 nativespace-cdp sshd[3832901]: Invalid user dev from 138.197.88.73 port 38940
Sep 19 08:26:58 nativespace-cdp sshd[3832901]: input_userauth_request: invalid user dev [preauth]
Sep 19 08:26:58 nativespace-cdp sshd[3832901]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:26:58 nativespace-cdp sshd[3832901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.88.73
Sep 19 08:27:00 nativespace-cdp sshd[3832901]: Failed password for invalid user dev from 138.197.88.73 port 38940 ssh2
Sep 19 08:27:00 nativespace-cdp sshd[3832901]: Received disconnect from 138.197.88.73 port 38940:11: Bye Bye [preauth]
Sep 19 08:27:00 nativespace-cdp sshd[3832901]: Disconnected from 138.197.88.73 port 38940 [preauth]
Sep 19 08:27:18 nativespace-cdp sshd[3833019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.103.14  user=root
Sep 19 08:27:18 nativespace-cdp sshd[3833019]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:27:20 nativespace-cdp sshd[3833019]: Failed password for root from 24.199.103.14 port 49334 ssh2
Sep 19 08:27:21 nativespace-cdp sshd[3833019]: Received disconnect from 24.199.103.14 port 49334:11: Bye Bye [preauth]
Sep 19 08:27:21 nativespace-cdp sshd[3833019]: Disconnected from 24.199.103.14 port 49334 [preauth]
Sep 19 08:27:30 nativespace-cdp sshd[3833097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.82.51.18  user=root
Sep 19 08:27:30 nativespace-cdp sshd[3833097]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:27:32 nativespace-cdp sshd[3833097]: Failed password for root from 34.82.51.18 port 43458 ssh2
Sep 19 08:27:38 nativespace-cdp sshd[3833097]: Received disconnect from 34.82.51.18 port 43458:11: Bye Bye [preauth]
Sep 19 08:27:38 nativespace-cdp sshd[3833097]: Disconnected from 34.82.51.18 port 43458 [preauth]
Sep 19 08:27:49 nativespace-cdp sshd[3833170]: Invalid user ftpuser from 23.158.56.152 port 50966
Sep 19 08:27:49 nativespace-cdp sshd[3833170]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 08:27:49 nativespace-cdp sshd[3833170]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:27:49 nativespace-cdp sshd[3833170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.152
Sep 19 08:27:51 nativespace-cdp sshd[3833170]: Failed password for invalid user ftpuser from 23.158.56.152 port 50966 ssh2
Sep 19 08:27:51 nativespace-cdp sshd[3833170]: Received disconnect from 23.158.56.152 port 50966:11: Bye Bye [preauth]
Sep 19 08:27:51 nativespace-cdp sshd[3833170]: Disconnected from 23.158.56.152 port 50966 [preauth]
Sep 19 08:31:16 nativespace-cdp sshd[3834046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.192.90  user=root
Sep 19 08:31:16 nativespace-cdp sshd[3834046]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:31:18 nativespace-cdp sshd[3834046]: Failed password for root from 159.223.192.90 port 50750 ssh2
Sep 19 08:31:21 nativespace-cdp sshd[3834057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.82.51.18  user=root
Sep 19 08:31:21 nativespace-cdp sshd[3834057]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:31:21 nativespace-cdp sshd[3834046]: Received disconnect from 159.223.192.90 port 50750:11: Bye Bye [preauth]
Sep 19 08:31:21 nativespace-cdp sshd[3834046]: Disconnected from 159.223.192.90 port 50750 [preauth]
Sep 19 08:31:23 nativespace-cdp sshd[3834049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.17  user=root
Sep 19 08:31:23 nativespace-cdp sshd[3834049]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:31:23 nativespace-cdp sshd[3834057]: Failed password for root from 34.82.51.18 port 37456 ssh2
Sep 19 08:31:23 nativespace-cdp sshd[3834057]: Received disconnect from 34.82.51.18 port 37456:11: Bye Bye [preauth]
Sep 19 08:31:23 nativespace-cdp sshd[3834057]: Disconnected from 34.82.51.18 port 37456 [preauth]
Sep 19 08:31:25 nativespace-cdp sshd[3834049]: Failed password for root from 194.152.206.17 port 36217 ssh2
Sep 19 08:31:25 nativespace-cdp sshd[3834049]: Received disconnect from 194.152.206.17 port 36217:11: Bye Bye [preauth]
Sep 19 08:31:25 nativespace-cdp sshd[3834049]: Disconnected from 194.152.206.17 port 36217 [preauth]
Sep 19 08:31:34 nativespace-cdp sshd[3834176]: Connection closed by 159.100.136.21 port 41846 [preauth]
Sep 19 08:31:43 nativespace-cdp sshd[3834195]: Invalid user dev from 138.197.88.73 port 56092
Sep 19 08:31:43 nativespace-cdp sshd[3834195]: input_userauth_request: invalid user dev [preauth]
Sep 19 08:31:43 nativespace-cdp sshd[3834195]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:31:43 nativespace-cdp sshd[3834195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.88.73
Sep 19 08:31:44 nativespace-cdp sshd[3834195]: Failed password for invalid user dev from 138.197.88.73 port 56092 ssh2
Sep 19 08:31:44 nativespace-cdp sshd[3834195]: Received disconnect from 138.197.88.73 port 56092:11: Bye Bye [preauth]
Sep 19 08:31:44 nativespace-cdp sshd[3834195]: Disconnected from 138.197.88.73 port 56092 [preauth]
Sep 19 08:31:49 nativespace-cdp sshd[3834215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.40.231  user=root
Sep 19 08:31:49 nativespace-cdp sshd[3834215]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:31:51 nativespace-cdp sshd[3834215]: Failed password for root from 222.253.40.231 port 61058 ssh2
Sep 19 08:31:51 nativespace-cdp sshd[3834215]: Received disconnect from 222.253.40.231 port 61058:11: Bye Bye [preauth]
Sep 19 08:31:51 nativespace-cdp sshd[3834215]: Disconnected from 222.253.40.231 port 61058 [preauth]
Sep 19 08:31:56 nativespace-cdp sshd[3834236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.152.206.17  user=root
Sep 19 08:31:56 nativespace-cdp sshd[3834236]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:31:56 nativespace-cdp sshd[3834234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.192.90  user=root
Sep 19 08:31:56 nativespace-cdp sshd[3834234]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:31:58 nativespace-cdp sshd[3834236]: Failed password for root from 194.152.206.17 port 12432 ssh2
Sep 19 08:31:58 nativespace-cdp sshd[3834236]: Received disconnect from 194.152.206.17 port 12432:11: Bye Bye [preauth]
Sep 19 08:31:58 nativespace-cdp sshd[3834236]: Disconnected from 194.152.206.17 port 12432 [preauth]
Sep 19 08:31:58 nativespace-cdp sshd[3834234]: Failed password for root from 159.223.192.90 port 59012 ssh2
Sep 19 08:31:58 nativespace-cdp sshd[3834234]: Received disconnect from 159.223.192.90 port 59012:11: Bye Bye [preauth]
Sep 19 08:31:58 nativespace-cdp sshd[3834234]: Disconnected from 159.223.192.90 port 59012 [preauth]
Sep 19 08:32:00 nativespace-cdp sshd[3834258]: Invalid user ftpuser from 34.82.51.18 port 47622
Sep 19 08:32:00 nativespace-cdp sshd[3834258]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 08:32:00 nativespace-cdp sshd[3834258]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:32:00 nativespace-cdp sshd[3834258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.82.51.18
Sep 19 08:32:01 nativespace-cdp sshd[3834258]: Failed password for invalid user ftpuser from 34.82.51.18 port 47622 ssh2
Sep 19 08:32:01 nativespace-cdp sshd[3834258]: Received disconnect from 34.82.51.18 port 47622:11: Bye Bye [preauth]
Sep 19 08:32:01 nativespace-cdp sshd[3834258]: Disconnected from 34.82.51.18 port 47622 [preauth]
Sep 19 08:32:18 nativespace-cdp sshd[3834428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.88.73  user=root
Sep 19 08:32:18 nativespace-cdp sshd[3834428]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:32:19 nativespace-cdp sshd[3834428]: Failed password for root from 138.197.88.73 port 39810 ssh2
Sep 19 08:32:19 nativespace-cdp sshd[3834428]: Received disconnect from 138.197.88.73 port 39810:11: Bye Bye [preauth]
Sep 19 08:32:19 nativespace-cdp sshd[3834428]: Disconnected from 138.197.88.73 port 39810 [preauth]
Sep 19 08:32:36 nativespace-cdp sshd[3834507]: Invalid user vsftp from 222.253.40.231 port 52064
Sep 19 08:32:36 nativespace-cdp sshd[3834507]: input_userauth_request: invalid user vsftp [preauth]
Sep 19 08:32:36 nativespace-cdp sshd[3834507]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:32:36 nativespace-cdp sshd[3834507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.253.40.231
Sep 19 08:32:38 nativespace-cdp sshd[3834507]: Failed password for invalid user vsftp from 222.253.40.231 port 52064 ssh2
Sep 19 08:32:38 nativespace-cdp sshd[3834507]: Received disconnect from 222.253.40.231 port 52064:11: Bye Bye [preauth]
Sep 19 08:32:38 nativespace-cdp sshd[3834507]: Disconnected from 222.253.40.231 port 52064 [preauth]
Sep 19 08:33:20 nativespace-cdp sshd[3835231]: Invalid user ftpuser from 24.199.103.14 port 33392
Sep 19 08:33:20 nativespace-cdp sshd[3835231]: input_userauth_request: invalid user ftpuser [preauth]
Sep 19 08:33:20 nativespace-cdp sshd[3835231]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 08:33:20 nativespace-cdp sshd[3835231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.103.14
Sep 19 08:33:22 nativespace-cdp sshd[3835231]: Failed password for invalid user ftpuser from 24.199.103.14 port 33392 ssh2
Sep 19 08:33:25 nativespace-cdp sshd[3835231]: Received disconnect from 24.199.103.14 port 33392:11: Bye Bye [preauth]
Sep 19 08:33:25 nativespace-cdp sshd[3835231]: Disconnected from 24.199.103.14 port 33392 [preauth]
Sep 19 08:33:27 nativespace-cdp sshd[3835265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.152  user=root
Sep 19 08:33:27 nativespace-cdp sshd[3835265]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:33:29 nativespace-cdp sshd[3835265]: Failed password for root from 23.158.56.152 port 37444 ssh2
Sep 19 08:33:29 nativespace-cdp sshd[3835265]: Received disconnect from 23.158.56.152 port 37444:11: Bye Bye [preauth]
Sep 19 08:33:29 nativespace-cdp sshd[3835265]: Disconnected from 23.158.56.152 port 37444 [preauth]
Sep 19 08:34:05 nativespace-cdp sshd[3835380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.103.14  user=root
Sep 19 08:34:05 nativespace-cdp sshd[3835380]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:34:07 nativespace-cdp sshd[3835380]: Failed password for root from 24.199.103.14 port 45370 ssh2
Sep 19 08:34:07 nativespace-cdp sshd[3835380]: Received disconnect from 24.199.103.14 port 45370:11: Bye Bye [preauth]
Sep 19 08:34:07 nativespace-cdp sshd[3835380]: Disconnected from 24.199.103.14 port 45370 [preauth]
Sep 19 08:34:30 nativespace-cdp sshd[3835483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.152  user=root
Sep 19 08:34:30 nativespace-cdp sshd[3835483]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 08:34:31 nativespace-cdp sshd[3835483]: Failed password for root from 23.158.56.152 port 50970 ssh2
Sep 19 08:34:31 nativespace-cdp sshd[3835483]: Received disconnect from 23.158.56.152 port 50970:11: Bye Bye [preauth]
Sep 19 08:34:31 nativespace-cdp sshd[3835483]: Disconnected from 23.158.56.152 port 50970 [preauth]
Sep 19 08:36:33 nativespace-cdp sshd[3836071]: Connection closed by 159.100.136.21 port 51210 [preauth]
Sep 19 08:41:33 nativespace-cdp sshd[3837105]: Connection closed by 159.100.136.21 port 60092 [preauth]
Sep 19 08:46:35 nativespace-cdp sshd[3838264]: Connection closed by 159.100.136.21 port 41794 [preauth]
Sep 19 08:51:35 nativespace-cdp sshd[3839700]: Connection closed by 159.100.136.21 port 51518 [preauth]
Sep 19 08:56:33 nativespace-cdp sshd[3841203]: Connection closed by 159.100.136.21 port 60504 [preauth]
Sep 19 09:01:33 nativespace-cdp sshd[3842627]: Connection closed by 159.100.136.21 port 41846 [preauth]
Sep 19 09:03:20 nativespace-cdp sshd[3843663]: Invalid user tom from 146.190.76.99 port 44590
Sep 19 09:03:20 nativespace-cdp sshd[3843663]: input_userauth_request: invalid user tom [preauth]
Sep 19 09:03:20 nativespace-cdp sshd[3843663]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 09:03:20 nativespace-cdp sshd[3843663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.76.99
Sep 19 09:03:22 nativespace-cdp sshd[3843663]: Failed password for invalid user tom from 146.190.76.99 port 44590 ssh2
Sep 19 09:03:22 nativespace-cdp sshd[3843663]: Received disconnect from 146.190.76.99 port 44590:11: Bye Bye [preauth]
Sep 19 09:03:22 nativespace-cdp sshd[3843663]: Disconnected from 146.190.76.99 port 44590 [preauth]
Sep 19 09:06:05 nativespace-cdp sshd[3844466]: Invalid user csserver from 159.223.150.43 port 33472
Sep 19 09:06:05 nativespace-cdp sshd[3844466]: input_userauth_request: invalid user csserver [preauth]
Sep 19 09:06:05 nativespace-cdp sshd[3844466]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 09:06:05 nativespace-cdp sshd[3844466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.150.43
Sep 19 09:06:07 nativespace-cdp sshd[3844466]: Failed password for invalid user csserver from 159.223.150.43 port 33472 ssh2
Sep 19 09:06:07 nativespace-cdp sshd[3844466]: Received disconnect from 159.223.150.43 port 33472:11: Bye Bye [preauth]
Sep 19 09:06:07 nativespace-cdp sshd[3844466]: Disconnected from 159.223.150.43 port 33472 [preauth]
Sep 19 09:06:33 nativespace-cdp sshd[3844527]: Connection closed by 159.100.136.21 port 51166 [preauth]
Sep 19 09:06:52 nativespace-cdp sshd[3844669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.13.44  user=root
Sep 19 09:06:52 nativespace-cdp sshd[3844669]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 09:06:54 nativespace-cdp sshd[3844669]: Failed password for root from 157.230.13.44 port 54534 ssh2
Sep 19 09:06:54 nativespace-cdp sshd[3844669]: Received disconnect from 157.230.13.44 port 54534:11: Bye Bye [preauth]
Sep 19 09:06:54 nativespace-cdp sshd[3844669]: Disconnected from 157.230.13.44 port 54534 [preauth]
Sep 19 09:08:30 nativespace-cdp sshd[3845014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.126.228  user=root
Sep 19 09:08:30 nativespace-cdp sshd[3845014]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 09:08:32 nativespace-cdp sshd[3845014]: Failed password for root from 68.183.126.228 port 55982 ssh2
Sep 19 09:08:32 nativespace-cdp sshd[3845014]: Received disconnect from 68.183.126.228 port 55982:11: Bye Bye [preauth]
Sep 19 09:08:32 nativespace-cdp sshd[3845014]: Disconnected from 68.183.126.228 port 55982 [preauth]
Sep 19 09:09:28 nativespace-cdp sshd[3845220]: Invalid user user03 from 146.190.76.99 port 47382
Sep 19 09:09:28 nativespace-cdp sshd[3845220]: input_userauth_request: invalid user user03 [preauth]
Sep 19 09:09:28 nativespace-cdp sshd[3845220]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 09:09:28 nativespace-cdp sshd[3845220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.76.99
Sep 19 09:09:29 nativespace-cdp sshd[3845220]: Failed password for invalid user user03 from 146.190.76.99 port 47382 ssh2
Sep 19 09:09:29 nativespace-cdp sshd[3845220]: Received disconnect from 146.190.76.99 port 47382:11: Bye Bye [preauth]
Sep 19 09:09:29 nativespace-cdp sshd[3845220]: Disconnected from 146.190.76.99 port 47382 [preauth]
Sep 19 09:09:42 nativespace-cdp sshd[3845265]: Invalid user user03 from 159.223.150.43 port 47988
Sep 19 09:09:42 nativespace-cdp sshd[3845265]: input_userauth_request: invalid user user03 [preauth]
Sep 19 09:09:42 nativespace-cdp sshd[3845265]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 09:09:42 nativespace-cdp sshd[3845265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.150.43
Sep 19 09:09:43 nativespace-cdp sshd[3845267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.13.44  user=root
Sep 19 09:09:43 nativespace-cdp sshd[3845267]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 09:09:44 nativespace-cdp sshd[3845267]: Failed password for root from 157.230.13.44 port 33456 ssh2
Sep 19 09:09:44 nativespace-cdp sshd[3845265]: Failed password for invalid user user03 from 159.223.150.43 port 47988 ssh2
Sep 19 09:09:45 nativespace-cdp sshd[3845267]: Received disconnect from 157.230.13.44 port 33456:11: Bye Bye [preauth]
Sep 19 09:09:45 nativespace-cdp sshd[3845267]: Disconnected from 157.230.13.44 port 33456 [preauth]
Sep 19 09:09:45 nativespace-cdp sshd[3845265]: Received disconnect from 159.223.150.43 port 47988:11: Bye Bye [preauth]
Sep 19 09:09:45 nativespace-cdp sshd[3845265]: Disconnected from 159.223.150.43 port 47988 [preauth]
Sep 19 09:09:54 nativespace-cdp sshd[3845313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.126.228  user=root
Sep 19 09:09:54 nativespace-cdp sshd[3845313]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 09:09:56 nativespace-cdp sshd[3845313]: Failed password for root from 68.183.126.228 port 47584 ssh2
Sep 19 09:09:56 nativespace-cdp sshd[3845313]: Received disconnect from 68.183.126.228 port 47584:11: Bye Bye [preauth]
Sep 19 09:09:56 nativespace-cdp sshd[3845313]: Disconnected from 68.183.126.228 port 47584 [preauth]
Sep 19 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:09:58 nativespace-cdp sudo[3845335]: pam_unix(sudo:session): session closed for user root
Sep 19 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:09:58 nativespace-cdp sudo[3845340]: pam_unix(sudo:session): session closed for user root
Sep 19 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:09:59 nativespace-cdp sudo[3845343]: pam_unix(sudo:session): session closed for user root
Sep 19 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:09:59 nativespace-cdp sudo[3845352]: pam_unix(sudo:session): session closed for user root
Sep 19 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845355]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845486]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845490]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845493]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845497]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845500]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:05 nativespace-cdp sudo[3845503]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:17 nativespace-cdp sshd[3845533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.150.43  user=root
Sep 19 09:10:17 nativespace-cdp sshd[3845533]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 09:10:19 nativespace-cdp sshd[3845533]: Failed password for root from 159.223.150.43 port 35856 ssh2
Sep 19 09:10:19 nativespace-cdp sshd[3845533]: Received disconnect from 159.223.150.43 port 35856:11: Bye Bye [preauth]
Sep 19 09:10:19 nativespace-cdp sshd[3845533]: Disconnected from 159.223.150.43 port 35856 [preauth]
Sep 19 09:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 09:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:20 nativespace-cdp sudo[3845549]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:20 nativespace-cdp sshd[3845546]: Invalid user sysadmin from 157.230.13.44 port 59964
Sep 19 09:10:20 nativespace-cdp sshd[3845546]: input_userauth_request: invalid user sysadmin [preauth]
Sep 19 09:10:20 nativespace-cdp sshd[3845546]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 09:10:20 nativespace-cdp sshd[3845546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.13.44
Sep 19 09:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 09:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:20 nativespace-cdp sudo[3845553]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=megacards user-2=musorguk user-3=wilsonsw user-4=atestord user-5=sarafoundation user-6=strathar user-7=lakesan1 user-8=brmrjxl user-9=magichat user-10=hhdugcor user-11=lbhyisi user-12=ptkxhsbt user-13=dickemery123 user-14=martsblo user-15=ulsukarm user-16=lbscrmod user-17=maflemin user-18=vantagep user-19=athenare user-20=connect9 user-21=booff user-22=markward user-23=foundation user-24=leereyn1 user-25=stephani user-26=agproduc user-27=still user-28=hodgesonweb user-29=theblack user-30=spectrum user-31=jarvisin user-32=bemadonn user-33=newstoda user-34=belle user-35=ggaaorgu user-36=bedfords user-37=oneoarco user-38=battlere user-39=vivienn1 user-40=firstre2 user-41=nstriton user-42=brighto1 user-43=nativene user-44=askhform user-45=stuartge user-46=innovat1 user-47=alexadmin user-48=skyfirec
Sep 19 09:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=highlegh user-50=southlon user-51=firstred user-52=costestimatorco user-53=firstrel user-54=clarkass user-55=opaiscyx user-56=coursemc user-57=firstres user-58=ultbcrra user-59=seftvta user-60=jonhartl user-61=thqkgnbz user-62=connectedshoppin user-63=ianrayne user-64=accooper user-65=fetch user-66=carsinyo user-67=hubmaster user-68=elecleis user-69=gilpin user-70=milloyco user-71=barbersh user-72=tigerlet user-73=nomistakes user-74=hidden user-75=smrszyqg user-76=isleofwi user-77=donnychicago user-78=firstre5 user-79=steakbridieme user-80=ctedorgu user-81=philmcph user-82=lkpier user-83=foods user-84=leftie user-85=health2045 user-86=fortunaz user-87=nscdp user-88=courseme user-89=eugincou user-90=hirefootballgame user-91=cwsocial user-92=howardon user-93=paulmca1 user-94=pugwash user-95=reliable user-96=ninejimm user-97=cambria1 user-98=cathski user-99=steve user-100=zebrapho user-101=bwppodcast
Sep 19 09:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=sibtoncc user-103=asandcoc user-104=dhyana user-105=darkstar user-106=eatspam user-107=beauty user-108=nsceres user-109=fawcettd user-110=burydropin user-111=crrtipdl user-112=sosevalu user-113=bakery user-114=boldover user-115=nove user-116=design user-117=kategilpin user-118=stagingerris user-119=dancinggardener user-120=ladburyp user-121=nvihkvu user-122=havantho user-123=cath user-124=sketchy user-125=what user-126=oubpgvbx user-127=tstardom user-128=david user-129=careers user-130=nbhavers user-131=mcdermos user-132=chrisdal user-133=jennimil user-134=tomandle user-135=romaldki user-136=branko user-137=hodgsonmail user-138=ranxterc user-139=outdoorc user-140=onlycont user-141=lucy user-142=attlebor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 09:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 09:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:22 nativespace-cdp sudo[3845558]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:22 nativespace-cdp sshd[3845546]: Failed password for invalid user sysadmin from 157.230.13.44 port 59964 ssh2
Sep 19 09:10:22 nativespace-cdp sshd[3845546]: Received disconnect from 157.230.13.44 port 59964:11: Bye Bye [preauth]
Sep 19 09:10:22 nativespace-cdp sshd[3845546]: Disconnected from 157.230.13.44 port 59964 [preauth]
Sep 19 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:23 nativespace-cdp sudo[3845603]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Kz4BDWF4QLCOX603.~
Sep 19 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:23 nativespace-cdp sudo[3845606]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Kz4BDWF4QLCOX603.~'
Sep 19 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:23 nativespace-cdp sudo[3845609]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Kz4BDWF4QLCOX603.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:23 nativespace-cdp sudo[3845614]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:23 nativespace-cdp sudo[3845617]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 09:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 09:10:25 nativespace-cdp sudo[3845652]: pam_unix(sudo:session): session closed for user root
Sep 19 09:10:26 nativespace-cdp sshd[3845663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.126.228  user=root
Sep 19 09:10:26 nativespace-cdp sshd[3845663]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 09:10:28 nativespace-cdp sshd[3845663]: Failed password for root from 68.183.126.228 port 37774 ssh2
Sep 19 09:10:33 nativespace-cdp sshd[3845663]: Received disconnect from 68.183.126.228 port 37774:11: Bye Bye [preauth]
Sep 19 09:10:33 nativespace-cdp sshd[3845663]: Disconnected from 68.183.126.228 port 37774 [preauth]
Sep 19 09:10:48 nativespace-cdp sshd[3845744]: Invalid user student1 from 146.190.76.99 port 44456
Sep 19 09:10:48 nativespace-cdp sshd[3845744]: input_userauth_request: invalid user student1 [preauth]
Sep 19 09:10:48 nativespace-cdp sshd[3845744]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 09:10:48 nativespace-cdp sshd[3845744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.76.99
Sep 19 09:10:50 nativespace-cdp sshd[3845744]: Failed password for invalid user student1 from 146.190.76.99 port 44456 ssh2
Sep 19 09:10:50 nativespace-cdp sshd[3845744]: Received disconnect from 146.190.76.99 port 44456:11: Bye Bye [preauth]
Sep 19 09:10:50 nativespace-cdp sshd[3845744]: Disconnected from 146.190.76.99 port 44456 [preauth]
Sep 19 09:11:33 nativespace-cdp sshd[3845945]: Connection closed by 159.100.136.21 port 60526 [preauth]
Sep 19 09:12:45 nativespace-cdp sshd[3846244]: Accepted publickey for root from 185.67.178.249 port 35086 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 19 09:12:45 nativespace-cdp sshd[3846244]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 19 09:12:45 nativespace-cdp sshd[3811639]: Received disconnect from 185.67.178.249 port 44760:11: Normal Shutdown
Sep 19 09:12:45 nativespace-cdp sshd[3811639]: Disconnected from 185.67.178.249 port 44760
Sep 19 09:12:45 nativespace-cdp sshd[3811639]: pam_unix(sshd:session): session closed for user root
Sep 19 09:16:33 nativespace-cdp sshd[3847094]: Connection closed by 159.100.136.21 port 42124 [preauth]
Sep 19 09:21:33 nativespace-cdp sshd[3848564]: Connection closed by 159.100.136.21 port 50894 [preauth]
Sep 19 09:26:35 nativespace-cdp sshd[3850064]: Connection closed by 159.100.136.21 port 60432 [preauth]
Sep 19 09:31:35 nativespace-cdp sshd[3851351]: Connection closed by 159.100.136.21 port 41588 [preauth]
Sep 19 09:36:34 nativespace-cdp sshd[3853120]: Connection closed by 159.100.136.21 port 51290 [preauth]
Sep 19 09:41:33 nativespace-cdp sshd[3854363]: Connection closed by 159.100.136.21 port 60736 [preauth]
Sep 19 09:45:11 nativespace-cdp sshd[3846244]: pam_unix(sshd:session): session closed for user root
Sep 19 09:46:33 nativespace-cdp sshd[3855673]: Connection closed by 159.100.136.21 port 42012 [preauth]
Sep 19 09:51:33 nativespace-cdp sshd[3857406]: Connection closed by 159.100.136.21 port 51496 [preauth]
Sep 19 09:56:33 nativespace-cdp sshd[3858626]: Connection closed by 159.100.136.21 port 32974 [preauth]
Sep 19 10:01:33 nativespace-cdp sshd[3860108]: Connection closed by 159.100.136.21 port 42456 [preauth]
Sep 19 10:06:33 nativespace-cdp sshd[3861492]: Connection closed by 159.100.136.21 port 51590 [preauth]
Sep 19 10:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 10:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:09:56 nativespace-cdp sudo[3862390]: pam_unix(sudo:session): session closed for user root
Sep 19 10:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 10:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:09:56 nativespace-cdp sudo[3862394]: pam_unix(sudo:session): session closed for user root
Sep 19 10:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 10:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:09:58 nativespace-cdp sudo[3862399]: pam_unix(sudo:session): session closed for user root
Sep 19 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:09:58 nativespace-cdp sudo[3862407]: pam_unix(sudo:session): session closed for user root
Sep 19 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862413]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862544]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862547]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862550]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862555]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862560]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 10:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:03 nativespace-cdp sudo[3862563]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:13 nativespace-cdp sudo[3862645]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:14 nativespace-cdp sudo[3862653]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=maflemin user-3=lbscrmod user-4=athenare user-5=connect9 user-6=vantagep user-7=foundation user-8=markward user-9=booff user-10=leereyn1 user-11=stephani user-12=still user-13=agproduc user-14=hodgesonweb user-15=theblack user-16=spectrum user-17=jarvisin user-18=musorguk user-19=megacards user-20=wilsonsw user-21=sarafoundation user-22=atestord user-23=strathar user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=lbhyisi user-28=hhdugcor user-29=ptkxhsbt user-30=dickemery123 user-31=martsblo user-32=southlon user-33=highlegh user-34=firstred user-35=costestimatorco user-36=clarkass user-37=firstrel user-38=opaiscyx user-39=coursemc user-40=firstres user-41=jonhartl user-42=seftvta user-43=ultbcrra user-44=thqkgnbz user-45=connectedshoppin user-46=ianrayne user-47=accooper
Sep 19 10:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=carsinyo user-49=fetch user-50=hubmaster user-51=elecleis user-52=gilpin user-53=milloyco user-54=bemadonn user-55=ggaaorgu user-56=belle user-57=newstoda user-58=bedfords user-59=battlere user-60=oneoarco user-61=firstre2 user-62=vivienn1 user-63=brighto1 user-64=nstriton user-65=nativene user-66=stuartge user-67=askhform user-68=innovat1 user-69=alexadmin user-70=skyfirec user-71=steve user-72=zebrapho user-73=bwppodcast user-74=asandcoc user-75=sibtoncc user-76=dhyana user-77=eatspam user-78=darkstar user-79=beauty user-80=nsceres user-81=burydropin user-82=fawcettd user-83=tigerlet user-84=barbersh user-85=hidden user-86=nomistakes user-87=isleofwi user-88=smrszyqg user-89=philmcph user-90=ctedorgu user-91=firstre5 user-92=donnychicago user-93=steakbridieme user-94=lkpier user-95=fortunaz user-96=health2045 user-97=foods user-98=leftie user-99=nscdp user-100=courseme user-101=eugincou
Sep 19 10:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=paulmca1 user-104=howardon user-105=pugwash user-106=cwsocial user-107=reliable user-108=ninejimm user-109=cambria1 user-110=cathski user-111=nbhavers user-112=careers user-113=david user-114=mcdermos user-115=chrisdal user-116=jennimil user-117=tomandle user-118=romaldki user-119=branko user-120=outdoorc user-121=hodgsonmail user-122=ranxterc user-123=onlycont user-124=attlebor user-125=lucy user-126=sosevalu user-127=crrtipdl user-128=bakery user-129=boldover user-130=nove user-131=design user-132=kategilpin user-133=ladburyp user-134=stagingerris user-135=dancinggardener user-136=nvihkvu user-137=cath user-138=sketchy user-139=havantho user-140=what user-141=tstardom user-142=oubpgvbx feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 19 10:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:15 nativespace-cdp sudo[3862660]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:16 nativespace-cdp sudo[3862676]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ep5mqDnG0xOQGs33.~
Sep 19 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:16 nativespace-cdp sudo[3862681]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ep5mqDnG0xOQGs33.~'
Sep 19 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:16 nativespace-cdp sudo[3862685]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ep5mqDnG0xOQGs33.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:16 nativespace-cdp sudo[3862691]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:16 nativespace-cdp sudo[3862696]: pam_unix(sudo:session): session closed for user root
Sep 19 10:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 10:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 10:10:18 nativespace-cdp sudo[3862720]: pam_unix(sudo:session): session closed for user root
Sep 19 10:11:34 nativespace-cdp sshd[3863319]: Connection closed by 159.100.136.21 port 60224 [preauth]
Sep 19 10:16:33 nativespace-cdp sshd[3864615]: Connection closed by 159.100.136.21 port 40956 [preauth]
Sep 19 10:21:35 nativespace-cdp sshd[3866357]: Connection closed by 159.100.136.21 port 50196 [preauth]
Sep 19 10:26:33 nativespace-cdp sshd[3867606]: Connection closed by 159.100.136.21 port 60096 [preauth]
Sep 19 10:31:33 nativespace-cdp sshd[3868918]: Connection closed by 159.100.136.21 port 41330 [preauth]
Sep 19 10:35:00 nativespace-cdp sshd[3869749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.178.68.152  user=root
Sep 19 10:35:00 nativespace-cdp sshd[3869749]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 10:35:02 nativespace-cdp sshd[3869749]: Failed password for root from 189.178.68.152 port 42912 ssh2
Sep 19 10:35:04 nativespace-cdp sshd[3869749]: Received disconnect from 189.178.68.152 port 42912:11: Bye Bye [preauth]
Sep 19 10:35:04 nativespace-cdp sshd[3869749]: Disconnected from 189.178.68.152 port 42912 [preauth]
Sep 19 10:36:34 nativespace-cdp sshd[3870233]: Connection closed by 159.100.136.21 port 51128 [preauth]
Sep 19 10:40:53 nativespace-cdp sshd[3871437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.178.68.152  user=root
Sep 19 10:40:53 nativespace-cdp sshd[3871437]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 10:40:55 nativespace-cdp sshd[3871437]: Failed password for root from 189.178.68.152 port 42598 ssh2
Sep 19 10:41:00 nativespace-cdp sshd[3871437]: Received disconnect from 189.178.68.152 port 42598:11: Bye Bye [preauth]
Sep 19 10:41:00 nativespace-cdp sshd[3871437]: Disconnected from 189.178.68.152 port 42598 [preauth]
Sep 19 10:41:35 nativespace-cdp sshd[3871880]: Connection closed by 159.100.136.21 port 60924 [preauth]
Sep 19 10:41:36 nativespace-cdp sshd[3871900]: Invalid user user2 from 189.178.68.152 port 55506
Sep 19 10:41:36 nativespace-cdp sshd[3871900]: input_userauth_request: invalid user user2 [preauth]
Sep 19 10:41:36 nativespace-cdp sshd[3871900]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 10:41:36 nativespace-cdp sshd[3871900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.178.68.152
Sep 19 10:41:37 nativespace-cdp sshd[3871900]: Failed password for invalid user user2 from 189.178.68.152 port 55506 ssh2
Sep 19 10:41:38 nativespace-cdp sshd[3871900]: Received disconnect from 189.178.68.152 port 55506:11: Bye Bye [preauth]
Sep 19 10:41:38 nativespace-cdp sshd[3871900]: Disconnected from 189.178.68.152 port 55506 [preauth]
Sep 19 10:46:34 nativespace-cdp sshd[3873221]: Connection closed by 159.100.136.21 port 42650 [preauth]
Sep 19 10:51:33 nativespace-cdp sshd[3875043]: Connection closed by 159.100.136.21 port 52196 [preauth]
Sep 19 10:56:37 nativespace-cdp sshd[3876194]: Connection closed by 159.100.136.21 port 33502 [preauth]
Sep 19 11:01:35 nativespace-cdp sshd[3877566]: Connection closed by 159.100.136.21 port 42776 [preauth]
Sep 19 11:06:33 nativespace-cdp sshd[3879323]: Connection closed by 159.100.136.21 port 52794 [preauth]
Sep 19 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:09:57 nativespace-cdp sudo[3880236]: pam_unix(sudo:session): session closed for user root
Sep 19 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:09:57 nativespace-cdp sudo[3880241]: pam_unix(sudo:session): session closed for user root
Sep 19 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:09:59 nativespace-cdp sudo[3880246]: pam_unix(sudo:session): session closed for user root
Sep 19 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:09:59 nativespace-cdp sudo[3880256]: pam_unix(sudo:session): session closed for user root
Sep 19 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880262]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880402]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880405]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880408]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880411]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880414]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:04 nativespace-cdp sudo[3880417]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:12 nativespace-cdp sudo[3880438]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 11:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:14 nativespace-cdp sudo[3880443]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nove user-2=boldover user-3=sosevalu user-4=crrtipdl user-5=bakery user-6=what user-7=oubpgvbx user-8=tstardom user-9=nvihkvu user-10=cath user-11=sketchy user-12=havantho user-13=kategilpin user-14=ladburyp user-15=dancinggardener user-16=stagingerris user-17=design user-18=tomandle user-19=jennimil user-20=mcdermos user-21=chrisdal user-22=nbhavers user-23=careers user-24=david user-25=attlebor user-26=lucy user-27=onlycont user-28=branko user-29=hodgsonmail user-30=ranxterc user-31=outdoorc user-32=romaldki user-33=health2045 user-34=fortunaz user-35=foods user-36=leftie user-37=nscdp user-38=ctedorgu user-39=philmcph user-40=firstre5 user-41=donnychicago user-42=steakbridieme user-43=lkpier user-44=isleofwi user-45=smrszyqg user-46=barbersh user-47=tigerlet user-48=hidden user-49=nomistakes
Sep 19 11:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=reliable user-51=ninejimm user-52=cathski user-53=cambria1 user-54=paulmca1 user-55=howardon user-56=pugwash user-57=cwsocial user-58=hirefootballgame user-59=courseme user-60=eugincou user-61=sibtoncc user-62=asandcoc user-63=zebrapho user-64=bwppodcast user-65=steve user-66=burydropin user-67=fawcettd user-68=nsceres user-69=eatspam user-70=darkstar user-71=beauty user-72=dhyana user-73=brighto1 user-74=nstriton user-75=battlere user-76=oneoarco user-77=firstre2 user-78=vivienn1 user-79=bedfords user-80=bemadonn user-81=ggaaorgu user-82=belle user-83=newstoda user-84=skyfirec user-85=alexadmin user-86=stuartge user-87=askhform user-88=innovat1 user-89=nativene user-90=firstres user-91=jonhartl user-92=seftvta user-93=ultbcrra user-94=opaiscyx user-95=coursemc user-96=costestimatorco user-97=firstrel user-98=clarkass user-99=southlon user-100=highlegh user-101=firstred user-102=elecleis user-103=milloyco
Sep 19 11:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=gilpin user-105=carsinyo user-106=fetch user-107=hubmaster user-108=ianrayne user-109=accooper user-110=thqkgnbz user-111=connectedshoppin user-112=brmrjxl user-113=lakesan1 user-114=sarafoundation user-115=atestord user-116=strathar user-117=wilsonsw user-118=musorguk user-119=megacards user-120=martsblo user-121=ptkxhsbt user-122=dickemery123 user-123=lbhyisi user-124=hhdugcor user-125=magichat user-126=markward user-127=foundation user-128=booff user-129=maflemin user-130=lbscrmod user-131=athenare user-132=connect9 user-133=vantagep user-134=ulsukarm user-135=jarvisin user-136=theblack user-137=hodgesonweb user-138=spectrum user-139=still user-140=agproduc user-141=leereyn1 user-142=stephani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 11:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 11:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:15 nativespace-cdp sudo[3880451]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 19 11:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:16 nativespace-cdp sudo[3880466]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 19 11:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 19 11:10:17 nativespace-cdp sudo[3880470]: pam_unix(sudo:session): session closed for user onlycont
Sep 19 11:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 19 11:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:17 nativespace-cdp sudo[3880482]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 19 11:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 11:10:18 nativespace-cdp sudo[3880490]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 11:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 19 11:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:20 nativespace-cdp sudo[3880514]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 19 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 19 11:10:20 nativespace-cdp sudo[3880518]: pam_unix(sudo:session): session closed for user lkpier
Sep 19 11:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 19 11:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:21 nativespace-cdp sudo[3880529]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 19 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 19 11:10:21 nativespace-cdp sudo[3880536]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 19 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 19 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 19 11:10:21 nativespace-cdp sudo[3880547]: pam_unix(sudo:session): session closed for user oneoarco
Sep 19 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 19 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:22 nativespace-cdp sudo[3880559]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 19 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 19 11:10:22 nativespace-cdp sudo[3880614]: pam_unix(sudo:session): session closed for user fortunaz
Sep 19 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 19 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:22 nativespace-cdp sudo[3880627]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:22 nativespace-cdp sudo[3880632]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 19 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:39 nativespace-cdp sudo[3881518]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 19 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:39 nativespace-cdp sudo[3881524]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 11:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:40 nativespace-cdp sudo[3881537]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-37k5betD8PxMBg5j.~
Sep 19 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:41 nativespace-cdp sudo[3881542]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-37k5betD8PxMBg5j.~'
Sep 19 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:41 nativespace-cdp sudo[3881546]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-37k5betD8PxMBg5j.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:41 nativespace-cdp sudo[3881552]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:41 nativespace-cdp sudo[3881557]: pam_unix(sudo:session): session closed for user root
Sep 19 11:10:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 11:10:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 11:10:50 nativespace-cdp sudo[3881595]: pam_unix(sudo:session): session closed for user root
Sep 19 11:11:33 nativespace-cdp sshd[3881792]: Connection closed by 159.100.136.21 port 33664 [preauth]
Sep 19 11:16:34 nativespace-cdp sshd[3882929]: Connection closed by 159.100.136.21 port 42164 [preauth]
Sep 19 11:21:33 nativespace-cdp sshd[3884567]: Connection closed by 159.100.136.21 port 51614 [preauth]
Sep 19 11:26:33 nativespace-cdp sshd[3885834]: Connection closed by 159.100.136.21 port 59904 [preauth]
Sep 19 11:31:33 nativespace-cdp sshd[3887100]: Connection closed by 159.100.136.21 port 41336 [preauth]
Sep 19 11:36:33 nativespace-cdp sshd[3888694]: Connection closed by 159.100.136.21 port 50782 [preauth]
Sep 19 11:41:33 nativespace-cdp sshd[3890149]: Connection closed by 159.100.136.21 port 59948 [preauth]
Sep 19 11:46:33 nativespace-cdp sshd[3891502]: Connection closed by 159.100.136.21 port 41432 [preauth]
Sep 19 11:51:33 nativespace-cdp sshd[3892883]: Connection closed by 159.100.136.21 port 50742 [preauth]
Sep 19 11:56:34 nativespace-cdp sshd[3894456]: Connection closed by 159.100.136.21 port 60764 [preauth]
Sep 19 12:01:33 nativespace-cdp sshd[3895828]: Connection closed by 159.100.136.21 port 41668 [preauth]
Sep 19 12:06:33 nativespace-cdp sshd[3897862]: Connection closed by 159.100.136.21 port 51810 [preauth]
Sep 19 12:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 12:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:09:57 nativespace-cdp sudo[3898659]: pam_unix(sudo:session): session closed for user root
Sep 19 12:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 12:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:09:57 nativespace-cdp sudo[3898664]: pam_unix(sudo:session): session closed for user root
Sep 19 12:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 12:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:09:58 nativespace-cdp sudo[3898669]: pam_unix(sudo:session): session closed for user root
Sep 19 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:09:58 nativespace-cdp sudo[3898682]: pam_unix(sudo:session): session closed for user root
Sep 19 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:01 nativespace-cdp sudo[3898689]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:02 nativespace-cdp sudo[3898789]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:02 nativespace-cdp sudo[3898792]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:02 nativespace-cdp sudo[3898796]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:02 nativespace-cdp sudo[3898803]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:02 nativespace-cdp sudo[3898806]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 12:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:02 nativespace-cdp sudo[3898809]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 12:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:05 nativespace-cdp sudo[3898852]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:06 nativespace-cdp sudo[3898858]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=burydropin user-2=fawcettd user-3=nsceres user-4=eatspam user-5=darkstar user-6=beauty user-7=dhyana user-8=sibtoncc user-9=asandcoc user-10=zebrapho user-11=bwppodcast user-12=steve user-13=ninejimm user-14=reliable user-15=cathski user-16=cambria1 user-17=pugwash user-18=howardon user-19=paulmca1 user-20=cwsocial user-21=hirefootballgame user-22=courseme user-23=eugincou user-24=health2045 user-25=fortunaz user-26=foods user-27=leftie user-28=nscdp user-29=ctedorgu user-30=philmcph user-31=donnychicago user-32=firstre5 user-33=steakbridieme user-34=lkpier user-35=smrszyqg user-36=isleofwi user-37=tigerlet user-38=barbersh user-39=hidden user-40=nomistakes user-41=attlebor user-42=lucy user-43=onlycont user-44=branko user-45=ranxterc user-46=outdoorc user-47=hodgsonmail user-48=romaldki
Sep 19 12:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=mcdermos user-52=chrisdal user-53=nbhavers user-54=careers user-55=david user-56=what user-57=tstardom user-58=oubpgvbx user-59=nvihkvu user-60=sketchy user-61=cath user-62=havantho user-63=kategilpin user-64=ladburyp user-65=dancinggardener user-66=stagingerris user-67=design user-68=nove user-69=boldover user-70=sosevalu user-71=crrtipdl user-72=bakery user-73=jarvisin user-74=hodgesonweb user-75=theblack user-76=spectrum user-77=still user-78=agproduc user-79=leereyn1 user-80=stephani user-81=booff user-82=markward user-83=foundation user-84=maflemin user-85=lbscrmod user-86=athenare user-87=connect9 user-88=vantagep user-89=ulsukarm user-90=martsblo user-91=ptkxhsbt user-92=dickemery123 user-93=lbhyisi user-94=hhdugcor user-95=magichat user-96=lakesan1 user-97=brmrjxl user-98=sarafoundation user-99=atestord user-100=strathar user-101=wilsonsw user-102=musorguk
Sep 19 12:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=megacards user-104=elecleis user-105=gilpin user-106=milloyco user-107=carsinyo user-108=fetch user-109=hubmaster user-110=ianrayne user-111=accooper user-112=thqkgnbz user-113=connectedshoppin user-114=firstres user-115=seftvta user-116=jonhartl user-117=ultbcrra user-118=coursemc user-119=opaiscyx user-120=costestimatorco user-121=firstrel user-122=clarkass user-123=southlon user-124=highlegh user-125=firstred user-126=alexadmin user-127=skyfirec user-128=askhform user-129=stuartge user-130=innovat1 user-131=nativene user-132=brighto1 user-133=nstriton user-134=battlere user-135=oneoarco user-136=firstre2 user-137=vivienn1 user-138=bedfords user-139=bemadonn user-140=belle user-141=ggaaorgu user-142=newstoda feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 12:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:09 nativespace-cdp sudo[3898864]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 12:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:09 nativespace-cdp sudo[3898872]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XeCAIss2Y3GC8frV.~
Sep 19 12:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:09 nativespace-cdp sudo[3898875]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XeCAIss2Y3GC8frV.~'
Sep 19 12:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:09 nativespace-cdp sudo[3898878]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-XeCAIss2Y3GC8frV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 12:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:09 nativespace-cdp sudo[3898882]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 12:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:09 nativespace-cdp sudo[3898885]: pam_unix(sudo:session): session closed for user root
Sep 19 12:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 12:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 12:10:11 nativespace-cdp sudo[3898906]: pam_unix(sudo:session): session closed for user root
Sep 19 12:11:33 nativespace-cdp sshd[3899223]: Connection closed by 159.100.136.21 port 60966 [preauth]
Sep 19 12:16:35 nativespace-cdp sshd[3900691]: Connection closed by 159.100.136.21 port 42144 [preauth]
Sep 19 12:21:33 nativespace-cdp sshd[3902108]: Connection closed by 159.100.136.21 port 50838 [preauth]
Sep 19 12:26:33 nativespace-cdp sshd[3903710]: Connection closed by 159.100.136.21 port 60480 [preauth]
Sep 19 12:31:33 nativespace-cdp sshd[3904981]: Connection closed by 159.100.136.21 port 41766 [preauth]
Sep 19 12:36:33 nativespace-cdp sshd[3906749]: Connection closed by 159.100.136.21 port 51776 [preauth]
Sep 19 12:41:35 nativespace-cdp sshd[3907954]: Connection closed by 159.100.136.21 port 33202 [preauth]
Sep 19 12:46:35 nativespace-cdp sshd[3909293]: Connection closed by 159.100.136.21 port 43234 [preauth]
Sep 19 12:51:37 nativespace-cdp sshd[3911086]: Connection closed by 159.100.136.21 port 52952 [preauth]
Sep 19 12:56:33 nativespace-cdp sshd[3912338]: Connection closed by 159.100.136.21 port 34446 [preauth]
Sep 19 12:58:53 nativespace-cdp sshd[3913100]: Invalid user smb from 96.84.198.29 port 33116
Sep 19 12:58:53 nativespace-cdp sshd[3913100]: input_userauth_request: invalid user smb [preauth]
Sep 19 12:58:53 nativespace-cdp sshd[3913100]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 12:58:53 nativespace-cdp sshd[3913100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.84.198.29
Sep 19 12:58:55 nativespace-cdp sshd[3913100]: Failed password for invalid user smb from 96.84.198.29 port 33116 ssh2
Sep 19 12:58:56 nativespace-cdp sshd[3913100]: Received disconnect from 96.84.198.29 port 33116:11: Bye Bye [preauth]
Sep 19 12:58:56 nativespace-cdp sshd[3913100]: Disconnected from 96.84.198.29 port 33116 [preauth]
Sep 19 12:59:19 nativespace-cdp sshd[3913208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.8.248  user=root
Sep 19 12:59:19 nativespace-cdp sshd[3913208]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 12:59:22 nativespace-cdp sshd[3913208]: Failed password for root from 185.196.8.248 port 44616 ssh2
Sep 19 12:59:22 nativespace-cdp sshd[3913208]: Received disconnect from 185.196.8.248 port 44616:11: Bye Bye [preauth]
Sep 19 12:59:22 nativespace-cdp sshd[3913208]: Disconnected from 185.196.8.248 port 44616 [preauth]
Sep 19 12:59:32 nativespace-cdp sshd[3913241]: Invalid user hu from 197.199.224.52 port 37118
Sep 19 12:59:32 nativespace-cdp sshd[3913241]: input_userauth_request: invalid user hu [preauth]
Sep 19 12:59:32 nativespace-cdp sshd[3913241]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 12:59:32 nativespace-cdp sshd[3913241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.199.224.52
Sep 19 12:59:33 nativespace-cdp sshd[3913241]: Failed password for invalid user hu from 197.199.224.52 port 37118 ssh2
Sep 19 12:59:33 nativespace-cdp sshd[3913241]: Received disconnect from 197.199.224.52 port 37118:11: Bye Bye [preauth]
Sep 19 12:59:33 nativespace-cdp sshd[3913241]: Disconnected from 197.199.224.52 port 37118 [preauth]
Sep 19 12:59:54 nativespace-cdp sshd[3913316]: Invalid user jenkins from 181.90.206.193 port 39568
Sep 19 12:59:54 nativespace-cdp sshd[3913316]: input_userauth_request: invalid user jenkins [preauth]
Sep 19 12:59:54 nativespace-cdp sshd[3913316]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 12:59:54 nativespace-cdp sshd[3913316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.206.193
Sep 19 12:59:56 nativespace-cdp sshd[3913316]: Failed password for invalid user jenkins from 181.90.206.193 port 39568 ssh2
Sep 19 12:59:57 nativespace-cdp sshd[3913316]: Received disconnect from 181.90.206.193 port 39568:11: Bye Bye [preauth]
Sep 19 12:59:57 nativespace-cdp sshd[3913316]: Disconnected from 181.90.206.193 port 39568 [preauth]
Sep 19 13:00:07 nativespace-cdp sshd[3913542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.18.116  user=root
Sep 19 13:00:07 nativespace-cdp sshd[3913542]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:00:09 nativespace-cdp sshd[3913542]: Failed password for root from 37.187.18.116 port 38306 ssh2
Sep 19 13:00:09 nativespace-cdp sshd[3913542]: Received disconnect from 37.187.18.116 port 38306:11: Bye Bye [preauth]
Sep 19 13:00:09 nativespace-cdp sshd[3913542]: Disconnected from 37.187.18.116 port 38306 [preauth]
Sep 19 13:00:22 nativespace-cdp sshd[3913653]: Invalid user william from 45.192.176.21 port 36884
Sep 19 13:00:22 nativespace-cdp sshd[3913653]: input_userauth_request: invalid user william [preauth]
Sep 19 13:00:22 nativespace-cdp sshd[3913653]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:00:22 nativespace-cdp sshd[3913653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.192.176.21
Sep 19 13:00:23 nativespace-cdp sshd[3913653]: Failed password for invalid user william from 45.192.176.21 port 36884 ssh2
Sep 19 13:00:24 nativespace-cdp sshd[3913653]: Received disconnect from 45.192.176.21 port 36884:11: Bye Bye [preauth]
Sep 19 13:00:24 nativespace-cdp sshd[3913653]: Disconnected from 45.192.176.21 port 36884 [preauth]
Sep 19 13:01:33 nativespace-cdp sshd[3913918]: Connection closed by 159.100.136.21 port 44246 [preauth]
Sep 19 13:02:37 nativespace-cdp sshd[3914242]: Invalid user xh from 134.209.222.136 port 51928
Sep 19 13:02:37 nativespace-cdp sshd[3914242]: input_userauth_request: invalid user xh [preauth]
Sep 19 13:02:37 nativespace-cdp sshd[3914242]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:02:37 nativespace-cdp sshd[3914242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.222.136
Sep 19 13:02:39 nativespace-cdp sshd[3914242]: Failed password for invalid user xh from 134.209.222.136 port 51928 ssh2
Sep 19 13:02:39 nativespace-cdp sshd[3914242]: Received disconnect from 134.209.222.136 port 51928:11: Bye Bye [preauth]
Sep 19 13:02:39 nativespace-cdp sshd[3914242]: Disconnected from 134.209.222.136 port 51928 [preauth]
Sep 19 13:03:58 nativespace-cdp sshd[3915259]: Invalid user nicolas from 96.84.198.29 port 54246
Sep 19 13:03:58 nativespace-cdp sshd[3915259]: input_userauth_request: invalid user nicolas [preauth]
Sep 19 13:03:59 nativespace-cdp sshd[3915263]: Invalid user smb from 197.199.224.52 port 53836
Sep 19 13:03:59 nativespace-cdp sshd[3915263]: input_userauth_request: invalid user smb [preauth]
Sep 19 13:04:00 nativespace-cdp sshd[3915263]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:00 nativespace-cdp sshd[3915259]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:00 nativespace-cdp sshd[3915263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.199.224.52
Sep 19 13:04:00 nativespace-cdp sshd[3915259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.84.198.29
Sep 19 13:04:02 nativespace-cdp sshd[3915259]: Failed password for invalid user nicolas from 96.84.198.29 port 54246 ssh2
Sep 19 13:04:02 nativespace-cdp sshd[3915263]: Failed password for invalid user smb from 197.199.224.52 port 53836 ssh2
Sep 19 13:04:03 nativespace-cdp sshd[3915259]: Received disconnect from 96.84.198.29 port 54246:11: Bye Bye [preauth]
Sep 19 13:04:03 nativespace-cdp sshd[3915259]: Disconnected from 96.84.198.29 port 54246 [preauth]
Sep 19 13:04:03 nativespace-cdp sshd[3915263]: Received disconnect from 197.199.224.52 port 53836:11: Bye Bye [preauth]
Sep 19 13:04:03 nativespace-cdp sshd[3915263]: Disconnected from 197.199.224.52 port 53836 [preauth]
Sep 19 13:04:09 nativespace-cdp sshd[3915310]: ssh_dispatch_run_fatal: Connection from 37.187.18.116 port 50648: Broken pipe [preauth]
Sep 19 13:04:17 nativespace-cdp sshd[3915413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.222.136  user=root
Sep 19 13:04:17 nativespace-cdp sshd[3915413]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:04:18 nativespace-cdp sshd[3915409]: Invalid user xh from 45.192.176.21 port 38602
Sep 19 13:04:18 nativespace-cdp sshd[3915409]: input_userauth_request: invalid user xh [preauth]
Sep 19 13:04:18 nativespace-cdp sshd[3915409]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:18 nativespace-cdp sshd[3915409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.192.176.21
Sep 19 13:04:19 nativespace-cdp sshd[3915413]: Failed password for root from 134.209.222.136 port 44908 ssh2
Sep 19 13:04:19 nativespace-cdp sshd[3915413]: Received disconnect from 134.209.222.136 port 44908:11: Bye Bye [preauth]
Sep 19 13:04:19 nativespace-cdp sshd[3915413]: Disconnected from 134.209.222.136 port 44908 [preauth]
Sep 19 13:04:20 nativespace-cdp sshd[3915409]: Failed password for invalid user xh from 45.192.176.21 port 38602 ssh2
Sep 19 13:04:20 nativespace-cdp sshd[3915409]: Received disconnect from 45.192.176.21 port 38602:11: Bye Bye [preauth]
Sep 19 13:04:20 nativespace-cdp sshd[3915409]: Disconnected from 45.192.176.21 port 38602 [preauth]
Sep 19 13:04:36 nativespace-cdp sshd[3915533]: Invalid user william from 181.90.206.193 port 33744
Sep 19 13:04:36 nativespace-cdp sshd[3915533]: input_userauth_request: invalid user william [preauth]
Sep 19 13:04:36 nativespace-cdp sshd[3915533]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:36 nativespace-cdp sshd[3915533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.206.193
Sep 19 13:04:37 nativespace-cdp sshd[3915538]: Invalid user hu from 96.84.198.29 port 38910
Sep 19 13:04:37 nativespace-cdp sshd[3915538]: input_userauth_request: invalid user hu [preauth]
Sep 19 13:04:37 nativespace-cdp sshd[3915538]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:37 nativespace-cdp sshd[3915538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.84.198.29
Sep 19 13:04:37 nativespace-cdp sshd[3915550]: Invalid user hu from 185.196.8.248 port 59942
Sep 19 13:04:37 nativespace-cdp sshd[3915550]: input_userauth_request: invalid user hu [preauth]
Sep 19 13:04:37 nativespace-cdp sshd[3915550]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:37 nativespace-cdp sshd[3915550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.8.248
Sep 19 13:04:39 nativespace-cdp sshd[3915533]: Failed password for invalid user william from 181.90.206.193 port 33744 ssh2
Sep 19 13:04:39 nativespace-cdp sshd[3915533]: Received disconnect from 181.90.206.193 port 33744:11: Bye Bye [preauth]
Sep 19 13:04:39 nativespace-cdp sshd[3915533]: Disconnected from 181.90.206.193 port 33744 [preauth]
Sep 19 13:04:39 nativespace-cdp sshd[3915538]: Failed password for invalid user hu from 96.84.198.29 port 38910 ssh2
Sep 19 13:04:39 nativespace-cdp sshd[3915538]: Received disconnect from 96.84.198.29 port 38910:11: Bye Bye [preauth]
Sep 19 13:04:39 nativespace-cdp sshd[3915538]: Disconnected from 96.84.198.29 port 38910 [preauth]
Sep 19 13:04:40 nativespace-cdp sshd[3915550]: Failed password for invalid user hu from 185.196.8.248 port 59942 ssh2
Sep 19 13:04:40 nativespace-cdp sshd[3915550]: Received disconnect from 185.196.8.248 port 59942:11: Bye Bye [preauth]
Sep 19 13:04:40 nativespace-cdp sshd[3915550]: Disconnected from 185.196.8.248 port 59942 [preauth]
Sep 19 13:04:44 nativespace-cdp sshd[3915614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.18.116  user=root
Sep 19 13:04:44 nativespace-cdp sshd[3915614]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:04:45 nativespace-cdp sshd[3915621]: Invalid user nicolas from 197.199.224.52 port 40386
Sep 19 13:04:45 nativespace-cdp sshd[3915621]: input_userauth_request: invalid user nicolas [preauth]
Sep 19 13:04:45 nativespace-cdp sshd[3915621]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:04:45 nativespace-cdp sshd[3915621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.199.224.52
Sep 19 13:04:46 nativespace-cdp sshd[3915614]: Failed password for root from 37.187.18.116 port 35408 ssh2
Sep 19 13:04:47 nativespace-cdp sshd[3915621]: Failed password for invalid user nicolas from 197.199.224.52 port 40386 ssh2
Sep 19 13:04:50 nativespace-cdp sshd[3915621]: Received disconnect from 197.199.224.52 port 40386:11: Bye Bye [preauth]
Sep 19 13:04:50 nativespace-cdp sshd[3915621]: Disconnected from 197.199.224.52 port 40386 [preauth]
Sep 19 13:04:50 nativespace-cdp sshd[3915614]: Received disconnect from 37.187.18.116 port 35408:11: Bye Bye [preauth]
Sep 19 13:04:50 nativespace-cdp sshd[3915614]: Disconnected from 37.187.18.116 port 35408 [preauth]
Sep 19 13:05:05 nativespace-cdp sshd[3915912]: Invalid user william from 134.209.222.136 port 57808
Sep 19 13:05:05 nativespace-cdp sshd[3915912]: input_userauth_request: invalid user william [preauth]
Sep 19 13:05:05 nativespace-cdp sshd[3915912]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:05:05 nativespace-cdp sshd[3915912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.222.136
Sep 19 13:05:06 nativespace-cdp sshd[3915801]: Received disconnect from 45.192.176.21 port 43278:11: Bye Bye [preauth]
Sep 19 13:05:06 nativespace-cdp sshd[3915801]: Disconnected from 45.192.176.21 port 43278 [preauth]
Sep 19 13:05:07 nativespace-cdp sshd[3915912]: Failed password for invalid user william from 134.209.222.136 port 57808 ssh2
Sep 19 13:05:07 nativespace-cdp sshd[3915912]: Received disconnect from 134.209.222.136 port 57808:11: Bye Bye [preauth]
Sep 19 13:05:07 nativespace-cdp sshd[3915912]: Disconnected from 134.209.222.136 port 57808 [preauth]
Sep 19 13:05:08 nativespace-cdp sshd[3915939]: Invalid user nicolas from 185.196.8.248 port 39374
Sep 19 13:05:08 nativespace-cdp sshd[3915939]: input_userauth_request: invalid user nicolas [preauth]
Sep 19 13:05:08 nativespace-cdp sshd[3915939]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:05:08 nativespace-cdp sshd[3915939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.8.248
Sep 19 13:05:10 nativespace-cdp sshd[3915939]: Failed password for invalid user nicolas from 185.196.8.248 port 39374 ssh2
Sep 19 13:05:10 nativespace-cdp sshd[3915939]: Received disconnect from 185.196.8.248 port 39374:11: Bye Bye [preauth]
Sep 19 13:05:10 nativespace-cdp sshd[3915939]: Disconnected from 185.196.8.248 port 39374 [preauth]
Sep 19 13:05:22 nativespace-cdp sshd[3916061]: Invalid user hu from 37.187.18.116 port 48414
Sep 19 13:05:22 nativespace-cdp sshd[3916061]: input_userauth_request: invalid user hu [preauth]
Sep 19 13:05:23 nativespace-cdp sshd[3916061]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:05:23 nativespace-cdp sshd[3916061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.18.116
Sep 19 13:05:25 nativespace-cdp sshd[3916061]: Failed password for invalid user hu from 37.187.18.116 port 48414 ssh2
Sep 19 13:05:26 nativespace-cdp sshd[3916061]: Received disconnect from 37.187.18.116 port 48414:11: Bye Bye [preauth]
Sep 19 13:05:26 nativespace-cdp sshd[3916061]: Disconnected from 37.187.18.116 port 48414 [preauth]
Sep 19 13:05:30 nativespace-cdp sshd[3916089]: Invalid user xh from 181.90.206.193 port 52576
Sep 19 13:05:30 nativespace-cdp sshd[3916089]: input_userauth_request: invalid user xh [preauth]
Sep 19 13:05:31 nativespace-cdp sshd[3916089]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:05:31 nativespace-cdp sshd[3916089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.90.206.193
Sep 19 13:05:34 nativespace-cdp sshd[3916089]: Failed password for invalid user xh from 181.90.206.193 port 52576 ssh2
Sep 19 13:05:36 nativespace-cdp sshd[3916089]: Received disconnect from 181.90.206.193 port 52576:11: Bye Bye [preauth]
Sep 19 13:05:36 nativespace-cdp sshd[3916089]: Disconnected from 181.90.206.193 port 52576 [preauth]
Sep 19 13:06:00 nativespace-cdp sshd[3916183]: ssh_dispatch_run_fatal: Connection from 45.192.176.21 port 57710: Broken pipe [preauth]
Sep 19 13:06:00 nativespace-cdp sshd[3916224]: Invalid user pych from 37.187.18.116 port 33168
Sep 19 13:06:00 nativespace-cdp sshd[3916224]: input_userauth_request: invalid user pych [preauth]
Sep 19 13:06:02 nativespace-cdp sshd[3916224]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:06:02 nativespace-cdp sshd[3916224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.18.116
Sep 19 13:06:04 nativespace-cdp sshd[3916224]: Failed password for invalid user pych from 37.187.18.116 port 33168 ssh2
Sep 19 13:06:04 nativespace-cdp sshd[3916224]: Received disconnect from 37.187.18.116 port 33168:11: Bye Bye [preauth]
Sep 19 13:06:04 nativespace-cdp sshd[3916224]: Disconnected from 37.187.18.116 port 33168 [preauth]
Sep 19 13:06:26 nativespace-cdp sshd[3916651]: ssh_dispatch_run_fatal: Connection from 181.90.206.193 port 41554: Broken pipe [preauth]
Sep 19 13:06:26 nativespace-cdp sshd[3916658]: Connection closed by 45.192.176.21 port 44242 [preauth]
Sep 19 13:06:33 nativespace-cdp sshd[3916717]: Connection closed by 159.100.136.21 port 53988 [preauth]
Sep 19 13:06:35 nativespace-cdp sshd[3916729]: Invalid user nicolas from 37.187.18.116 port 46158
Sep 19 13:06:35 nativespace-cdp sshd[3916729]: input_userauth_request: invalid user nicolas [preauth]
Sep 19 13:06:35 nativespace-cdp sshd[3916729]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:06:35 nativespace-cdp sshd[3916729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.18.116
Sep 19 13:06:37 nativespace-cdp sshd[3916729]: Failed password for invalid user nicolas from 37.187.18.116 port 46158 ssh2
Sep 19 13:06:37 nativespace-cdp sshd[3916729]: Received disconnect from 37.187.18.116 port 46158:11: Bye Bye [preauth]
Sep 19 13:06:37 nativespace-cdp sshd[3916729]: Disconnected from 37.187.18.116 port 46158 [preauth]
Sep 19 13:07:01 nativespace-cdp sshd[3916924]: Invalid user jenkins from 45.192.176.21 port 33490
Sep 19 13:07:01 nativespace-cdp sshd[3916924]: input_userauth_request: invalid user jenkins [preauth]
Sep 19 13:07:01 nativespace-cdp sshd[3916924]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:07:01 nativespace-cdp sshd[3916924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.192.176.21
Sep 19 13:07:03 nativespace-cdp sshd[3916924]: Failed password for invalid user jenkins from 45.192.176.21 port 33490 ssh2
Sep 19 13:07:06 nativespace-cdp sshd[3916924]: Received disconnect from 45.192.176.21 port 33490:11: Bye Bye [preauth]
Sep 19 13:07:06 nativespace-cdp sshd[3916924]: Disconnected from 45.192.176.21 port 33490 [preauth]
Sep 19 13:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 13:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:12 nativespace-cdp sudo[3918461]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 13:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:12 nativespace-cdp sudo[3918464]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 13:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:14 nativespace-cdp sudo[3918467]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 13:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:14 nativespace-cdp sudo[3918488]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 13:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:18 nativespace-cdp sudo[3918501]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:19 nativespace-cdp sudo[3918535]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:19 nativespace-cdp sudo[3918538]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:19 nativespace-cdp sudo[3918541]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:19 nativespace-cdp sudo[3918544]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:19 nativespace-cdp sudo[3918547]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 13:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:19 nativespace-cdp sudo[3918550]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 13:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:22 nativespace-cdp sudo[3918610]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 13:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:25 nativespace-cdp sudo[3918615]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stagingerris user-2=dancinggardener user-3=ladburyp user-4=kategilpin user-5=design user-6=tstardom user-7=oubpgvbx user-8=what user-9=havantho user-10=sketchy user-11=cath user-12=nvihkvu user-13=bakery user-14=crrtipdl user-15=sosevalu user-16=nove user-17=boldover user-18=ranxterc user-19=outdoorc user-20=hodgsonmail user-21=branko user-22=romaldki user-23=lucy user-24=attlebor user-25=onlycont user-26=chrisdal user-27=mcdermos user-28=david user-29=nbhavers user-30=careers user-31=tomandle user-32=jennimil user-33=hirefootballgame user-34=eugincou user-35=courseme user-36=cambria1 user-37=cathski user-38=ninejimm user-39=reliable user-40=cwsocial user-41=howardon user-42=pugwash user-43=paulmca1 user-44=isleofwi user-45=smrszyqg user-46=nomistakes user-47=hidden user-48=barbersh
Sep 19 13:10:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tigerlet user-50=nscdp user-51=foods user-52=leftie user-53=fortunaz user-54=health2045 user-55=lkpier user-56=firstre5 user-57=steakbridieme user-58=donnychicago user-59=ctedorgu user-60=philmcph user-61=beauty user-62=darkstar user-63=eatspam user-64=dhyana user-65=fawcettd user-66=burydropin user-67=nsceres user-68=bwppodcast user-69=zebrapho user-70=steve user-71=sibtoncc user-72=asandcoc user-73=innovat1 user-74=stuartge user-75=askhform user-76=nativene user-77=skyfirec user-78=alexadmin user-79=bedfords user-80=newstoda user-81=belle user-82=ggaaorgu user-83=bemadonn user-84=nstriton user-85=brighto1 user-86=vivienn1 user-87=firstre2 user-88=oneoarco user-89=battlere user-90=accooper user-91=ianrayne user-92=connectedshoppin user-93=thqkgnbz user-94=milloyco user-95=gilpin user-96=elecleis user-97=hubmaster user-98=fetch user-99=carsinyo user-100=clarkass user-101=firstrel user-102=costestimatorco
Sep 19 13:10:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstred user-104=highlegh user-105=southlon user-106=ultbcrra user-107=jonhartl user-108=seftvta user-109=firstres user-110=opaiscyx user-111=coursemc user-112=hhdugcor user-113=lbhyisi user-114=magichat user-115=martsblo user-116=dickemery123 user-117=ptkxhsbt user-118=wilsonsw user-119=megacards user-120=musorguk user-121=lakesan1 user-122=brmrjxl user-123=strathar user-124=atestord user-125=sarafoundation user-126=agproduc user-127=still user-128=stephani user-129=leereyn1 user-130=jarvisin user-131=spectrum user-132=hodgesonweb user-133=theblack user-134=ulsukarm user-135=booff user-136=markward user-137=foundation user-138=vantagep user-139=connect9 user-140=athenare user-141=lbscrmod user-142=maflemin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 13:10:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 13:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:26 nativespace-cdp sudo[3918663]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 13:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:27 nativespace-cdp sudo[3918676]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UUPZUCIti2NTWbVI.~
Sep 19 13:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:27 nativespace-cdp sudo[3918682]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UUPZUCIti2NTWbVI.~'
Sep 19 13:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:27 nativespace-cdp sudo[3918686]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UUPZUCIti2NTWbVI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 13:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:27 nativespace-cdp sudo[3918692]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 13:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:27 nativespace-cdp sudo[3918697]: pam_unix(sudo:session): session closed for user root
Sep 19 13:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 13:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 13:10:30 nativespace-cdp sudo[3918745]: pam_unix(sudo:session): session closed for user root
Sep 19 13:11:33 nativespace-cdp sshd[3919284]: Connection closed by 159.100.136.21 port 34516 [preauth]
Sep 19 13:16:33 nativespace-cdp sshd[3922181]: Connection closed by 159.100.136.21 port 44382 [preauth]
Sep 19 13:21:33 nativespace-cdp sshd[3925557]: Connection closed by 159.100.136.21 port 53606 [preauth]
Sep 19 13:25:32 nativespace-cdp sshd[3928125]: Invalid user sistema from 45.138.74.157 port 49490
Sep 19 13:25:32 nativespace-cdp sshd[3928125]: input_userauth_request: invalid user sistema [preauth]
Sep 19 13:25:32 nativespace-cdp sshd[3928125]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:25:32 nativespace-cdp sshd[3928125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.74.157
Sep 19 13:25:34 nativespace-cdp sshd[3928125]: Failed password for invalid user sistema from 45.138.74.157 port 49490 ssh2
Sep 19 13:25:34 nativespace-cdp sshd[3928125]: Received disconnect from 45.138.74.157 port 49490:11: Bye Bye [preauth]
Sep 19 13:25:34 nativespace-cdp sshd[3928125]: Disconnected from 45.138.74.157 port 49490 [preauth]
Sep 19 13:25:41 nativespace-cdp sshd[3928165]: Invalid user ubuntu from 121.135.218.206 port 49402
Sep 19 13:25:41 nativespace-cdp sshd[3928165]: input_userauth_request: invalid user ubuntu [preauth]
Sep 19 13:25:41 nativespace-cdp sshd[3928165]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:25:41 nativespace-cdp sshd[3928165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.135.218.206
Sep 19 13:25:43 nativespace-cdp sshd[3928165]: Failed password for invalid user ubuntu from 121.135.218.206 port 49402 ssh2
Sep 19 13:25:44 nativespace-cdp sshd[3928165]: Received disconnect from 121.135.218.206 port 49402:11: Bye Bye [preauth]
Sep 19 13:25:44 nativespace-cdp sshd[3928165]: Disconnected from 121.135.218.206 port 49402 [preauth]
Sep 19 13:26:35 nativespace-cdp sshd[3928690]: Connection closed by 159.100.136.21 port 35352 [preauth]
Sep 19 13:26:59 nativespace-cdp sshd[3928847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.237.12  user=root
Sep 19 13:26:59 nativespace-cdp sshd[3928847]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:27:01 nativespace-cdp sshd[3928847]: Failed password for root from 123.231.237.12 port 53188 ssh2
Sep 19 13:27:01 nativespace-cdp sshd[3928847]: Received disconnect from 123.231.237.12 port 53188:11: Bye Bye [preauth]
Sep 19 13:27:01 nativespace-cdp sshd[3928847]: Disconnected from 123.231.237.12 port 53188 [preauth]
Sep 19 13:27:01 nativespace-cdp sshd[3928859]: Invalid user 7days from 103.191.92.173 port 48914
Sep 19 13:27:01 nativespace-cdp sshd[3928859]: input_userauth_request: invalid user 7days [preauth]
Sep 19 13:27:01 nativespace-cdp sshd[3928859]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:27:01 nativespace-cdp sshd[3928859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.191.92.173
Sep 19 13:27:03 nativespace-cdp sshd[3928859]: Failed password for invalid user 7days from 103.191.92.173 port 48914 ssh2
Sep 19 13:27:13 nativespace-cdp sshd[3928859]: Received disconnect from 103.191.92.173 port 48914:11: Bye Bye [preauth]
Sep 19 13:27:13 nativespace-cdp sshd[3928859]: Disconnected from 103.191.92.173 port 48914 [preauth]
Sep 19 13:27:21 nativespace-cdp sshd[3929143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.147.26  user=root
Sep 19 13:27:21 nativespace-cdp sshd[3929143]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:27:23 nativespace-cdp sshd[3929143]: Failed password for root from 157.245.147.26 port 43408 ssh2
Sep 19 13:27:23 nativespace-cdp sshd[3929143]: Received disconnect from 157.245.147.26 port 43408:11: Bye Bye [preauth]
Sep 19 13:27:23 nativespace-cdp sshd[3929143]: Disconnected from 157.245.147.26 port 43408 [preauth]
Sep 19 13:29:00 nativespace-cdp sshd[3930317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.74.157  user=root
Sep 19 13:29:00 nativespace-cdp sshd[3930317]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:29:02 nativespace-cdp sshd[3930317]: Failed password for root from 45.138.74.157 port 55200 ssh2
Sep 19 13:29:02 nativespace-cdp sshd[3930317]: Received disconnect from 45.138.74.157 port 55200:11: Bye Bye [preauth]
Sep 19 13:29:02 nativespace-cdp sshd[3930317]: Disconnected from 45.138.74.157 port 55200 [preauth]
Sep 19 13:29:25 nativespace-cdp sshd[3930675]: Invalid user 7days from 121.135.218.206 port 55840
Sep 19 13:29:25 nativespace-cdp sshd[3930675]: input_userauth_request: invalid user 7days [preauth]
Sep 19 13:29:25 nativespace-cdp sshd[3930675]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:29:25 nativespace-cdp sshd[3930675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.135.218.206
Sep 19 13:29:28 nativespace-cdp sshd[3930675]: Failed password for invalid user 7days from 121.135.218.206 port 55840 ssh2
Sep 19 13:29:28 nativespace-cdp sshd[3930675]: Received disconnect from 121.135.218.206 port 55840:11: Bye Bye [preauth]
Sep 19 13:29:28 nativespace-cdp sshd[3930675]: Disconnected from 121.135.218.206 port 55840 [preauth]
Sep 19 13:29:40 nativespace-cdp sshd[3930802]: Invalid user guara from 45.138.74.157 port 58192
Sep 19 13:29:40 nativespace-cdp sshd[3930802]: input_userauth_request: invalid user guara [preauth]
Sep 19 13:29:40 nativespace-cdp sshd[3930802]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:29:40 nativespace-cdp sshd[3930802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.74.157
Sep 19 13:29:41 nativespace-cdp sshd[3930802]: Failed password for invalid user guara from 45.138.74.157 port 58192 ssh2
Sep 19 13:29:41 nativespace-cdp sshd[3930802]: Received disconnect from 45.138.74.157 port 58192:11: Bye Bye [preauth]
Sep 19 13:29:41 nativespace-cdp sshd[3930802]: Disconnected from 45.138.74.157 port 58192 [preauth]
Sep 19 13:29:48 nativespace-cdp sshd[3930835]: Invalid user 7days from 157.245.147.26 port 51176
Sep 19 13:29:48 nativespace-cdp sshd[3930835]: input_userauth_request: invalid user 7days [preauth]
Sep 19 13:29:48 nativespace-cdp sshd[3930835]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 13:29:48 nativespace-cdp sshd[3930835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.147.26
Sep 19 13:29:51 nativespace-cdp sshd[3930835]: Failed password for invalid user 7days from 157.245.147.26 port 51176 ssh2
Sep 19 13:29:51 nativespace-cdp sshd[3930835]: Received disconnect from 157.245.147.26 port 51176:11: Bye Bye [preauth]
Sep 19 13:29:51 nativespace-cdp sshd[3930835]: Disconnected from 157.245.147.26 port 51176 [preauth]
Sep 19 13:29:58 nativespace-cdp sshd[3930917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.237.12  user=root
Sep 19 13:29:58 nativespace-cdp sshd[3930917]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:30:00 nativespace-cdp sshd[3930917]: Failed password for root from 123.231.237.12 port 56572 ssh2
Sep 19 13:30:01 nativespace-cdp sshd[3930917]: Received disconnect from 123.231.237.12 port 56572:11: Bye Bye [preauth]
Sep 19 13:30:01 nativespace-cdp sshd[3930917]: Disconnected from 123.231.237.12 port 56572 [preauth]
Sep 19 13:30:14 nativespace-cdp sshd[3931437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.135.218.206  user=root
Sep 19 13:30:14 nativespace-cdp sshd[3931437]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:30:15 nativespace-cdp sshd[3931437]: Failed password for root from 121.135.218.206 port 55656 ssh2
Sep 19 13:30:17 nativespace-cdp sshd[3931437]: Received disconnect from 121.135.218.206 port 55656:11: Bye Bye [preauth]
Sep 19 13:30:17 nativespace-cdp sshd[3931437]: Disconnected from 121.135.218.206 port 55656 [preauth]
Sep 19 13:30:32 nativespace-cdp sshd[3931659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.147.26  user=root
Sep 19 13:30:32 nativespace-cdp sshd[3931659]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:30:34 nativespace-cdp sshd[3931659]: Failed password for root from 157.245.147.26 port 44690 ssh2
Sep 19 13:30:34 nativespace-cdp sshd[3931659]: Received disconnect from 157.245.147.26 port 44690:11: Bye Bye [preauth]
Sep 19 13:30:34 nativespace-cdp sshd[3931659]: Disconnected from 157.245.147.26 port 44690 [preauth]
Sep 19 13:30:38 nativespace-cdp sshd[3931668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.191.92.173  user=root
Sep 19 13:30:38 nativespace-cdp sshd[3931668]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:30:40 nativespace-cdp sshd[3931668]: Failed password for root from 103.191.92.173 port 40306 ssh2
Sep 19 13:30:44 nativespace-cdp sshd[3931668]: Received disconnect from 103.191.92.173 port 40306:11: Bye Bye [preauth]
Sep 19 13:30:44 nativespace-cdp sshd[3931668]: Disconnected from 103.191.92.173 port 40306 [preauth]
Sep 19 13:30:46 nativespace-cdp sshd[3931743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.237.12  user=root
Sep 19 13:30:46 nativespace-cdp sshd[3931743]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:30:48 nativespace-cdp sshd[3931743]: Failed password for root from 123.231.237.12 port 42682 ssh2
Sep 19 13:31:30 nativespace-cdp sshd[3932123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.191.92.173  user=root
Sep 19 13:31:30 nativespace-cdp sshd[3932123]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 13:31:32 nativespace-cdp sshd[3932123]: Failed password for root from 103.191.92.173 port 53756 ssh2
Sep 19 13:31:33 nativespace-cdp sshd[3932123]: Received disconnect from 103.191.92.173 port 53756:11: Bye Bye [preauth]
Sep 19 13:31:33 nativespace-cdp sshd[3932123]: Disconnected from 103.191.92.173 port 53756 [preauth]
Sep 19 13:31:33 nativespace-cdp sshd[3932235]: Connection closed by 159.100.136.21 port 44926 [preauth]
Sep 19 13:36:33 nativespace-cdp sshd[3934177]: Connection closed by 159.100.136.21 port 54292 [preauth]
Sep 19 13:41:33 nativespace-cdp sshd[3935456]: Connection closed by 159.100.136.21 port 35292 [preauth]
Sep 19 13:46:33 nativespace-cdp sshd[3936731]: Connection closed by 159.100.136.21 port 44750 [preauth]
Sep 19 13:51:36 nativespace-cdp sshd[3938094]: Connection closed by 159.100.136.21 port 54248 [preauth]
Sep 19 13:56:33 nativespace-cdp sshd[3939618]: Connection closed by 159.100.136.21 port 35462 [preauth]
Sep 19 14:01:33 nativespace-cdp sshd[3941018]: Connection closed by 159.100.136.21 port 44032 [preauth]
Sep 19 14:06:34 nativespace-cdp sshd[3942897]: Connection closed by 159.100.136.21 port 53548 [preauth]
Sep 19 14:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 14:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:07 nativespace-cdp sudo[3943935]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 14:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:07 nativespace-cdp sudo[3943939]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 14:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:08 nativespace-cdp sudo[3943942]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 14:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:08 nativespace-cdp sudo[3943947]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 14:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943950]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943971]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943980]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943983]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943986]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943990]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 14:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:14 nativespace-cdp sudo[3943993]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 14:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:16 nativespace-cdp sudo[3944008]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 14:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:18 nativespace-cdp sudo[3944016]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nove user-2=boldover user-3=sosevalu user-4=crrtipdl user-5=bakery user-6=what user-7=oubpgvbx user-8=tstardom user-9=nvihkvu user-10=sketchy user-11=cath user-12=havantho user-13=kategilpin user-14=ladburyp user-15=dancinggardener user-16=stagingerris user-17=design user-18=tomandle user-19=jennimil user-20=mcdermos user-21=chrisdal user-22=nbhavers user-23=careers user-24=david user-25=attlebor user-26=lucy user-27=onlycont user-28=branko user-29=hodgsonmail user-30=ranxterc user-31=outdoorc user-32=romaldki user-33=fortunaz user-34=health2045 user-35=leftie user-36=foods user-37=nscdp user-38=ctedorgu user-39=philmcph user-40=donnychicago user-41=firstre5 user-42=steakbridieme user-43=lkpier user-44=isleofwi user-45=smrszyqg user-46=barbersh user-47=tigerlet user-48=hidden user-49=nomistakes
Sep 19 14:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=reliable user-51=ninejimm user-52=cathski user-53=cambria1 user-54=howardon user-55=paulmca1 user-56=pugwash user-57=cwsocial user-58=hirefootballgame user-59=courseme user-60=eugincou user-61=sibtoncc user-62=asandcoc user-63=zebrapho user-64=bwppodcast user-65=steve user-66=burydropin user-67=fawcettd user-68=nsceres user-69=eatspam user-70=darkstar user-71=beauty user-72=dhyana user-73=brighto1 user-74=nstriton user-75=battlere user-76=oneoarco user-77=firstre2 user-78=vivienn1 user-79=bedfords user-80=bemadonn user-81=ggaaorgu user-82=belle user-83=newstoda user-84=alexadmin user-85=skyfirec user-86=stuartge user-87=askhform user-88=innovat1 user-89=nativene user-90=firstres user-91=seftvta user-92=jonhartl user-93=ultbcrra user-94=coursemc user-95=opaiscyx user-96=costestimatorco user-97=firstrel user-98=clarkass user-99=southlon user-100=highlegh user-101=firstred user-102=elecleis user-103=milloyco
Sep 19 14:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=gilpin user-105=carsinyo user-106=fetch user-107=hubmaster user-108=ianrayne user-109=accooper user-110=thqkgnbz user-111=connectedshoppin user-112=brmrjxl user-113=lakesan1 user-114=sarafoundation user-115=atestord user-116=strathar user-117=wilsonsw user-118=musorguk user-119=megacards user-120=martsblo user-121=ptkxhsbt user-122=dickemery123 user-123=lbhyisi user-124=hhdugcor user-125=magichat user-126=booff user-127=markward user-128=foundation user-129=maflemin user-130=lbscrmod user-131=athenare user-132=connect9 user-133=vantagep user-134=ulsukarm user-135=jarvisin user-136=hodgesonweb user-137=theblack user-138=spectrum user-139=still user-140=agproduc user-141=leereyn1 user-142=stephani feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 14:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 14:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:19 nativespace-cdp sudo[3944024]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 14:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:20 nativespace-cdp sudo[3944035]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tqZMEPRNSve2ULS1.~
Sep 19 14:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:20 nativespace-cdp sudo[3944038]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tqZMEPRNSve2ULS1.~'
Sep 19 14:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:20 nativespace-cdp sudo[3944041]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tqZMEPRNSve2ULS1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 14:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:20 nativespace-cdp sudo[3944045]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 14:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:20 nativespace-cdp sudo[3944048]: pam_unix(sudo:session): session closed for user root
Sep 19 14:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 14:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 14:10:37 nativespace-cdp sudo[3944152]: pam_unix(sudo:session): session closed for user root
Sep 19 14:11:36 nativespace-cdp sshd[3944427]: Connection closed by 159.100.136.21 port 34388 [preauth]
Sep 19 14:16:33 nativespace-cdp sshd[3945765]: Connection closed by 159.100.136.21 port 44134 [preauth]
Sep 19 14:21:01 nativespace-cdp sshd[3946828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.154.23  user=root
Sep 19 14:21:01 nativespace-cdp sshd[3946828]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 14:21:03 nativespace-cdp sshd[3946828]: Failed password for root from 103.160.154.23 port 51090 ssh2
Sep 19 14:21:03 nativespace-cdp sshd[3946828]: Received disconnect from 103.160.154.23 port 51090:11: Bye Bye [preauth]
Sep 19 14:21:03 nativespace-cdp sshd[3946828]: Disconnected from 103.160.154.23 port 51090 [preauth]
Sep 19 14:21:33 nativespace-cdp sshd[3946977]: Connection closed by 159.100.136.21 port 52344 [preauth]
Sep 19 14:23:26 nativespace-cdp sshd[3947309]: Invalid user test1 from 64.224.252.79 port 36302
Sep 19 14:23:26 nativespace-cdp sshd[3947309]: input_userauth_request: invalid user test1 [preauth]
Sep 19 14:23:26 nativespace-cdp sshd[3947309]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:23:26 nativespace-cdp sshd[3947309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.224.252.79
Sep 19 14:23:27 nativespace-cdp sshd[3947309]: Failed password for invalid user test1 from 64.224.252.79 port 36302 ssh2
Sep 19 14:23:27 nativespace-cdp sshd[3947309]: Received disconnect from 64.224.252.79 port 36302:11: Bye Bye [preauth]
Sep 19 14:23:27 nativespace-cdp sshd[3947309]: Disconnected from 64.224.252.79 port 36302 [preauth]
Sep 19 14:24:14 nativespace-cdp sshd[3947665]: Invalid user soporte from 142.93.51.142 port 45512
Sep 19 14:24:14 nativespace-cdp sshd[3947665]: input_userauth_request: invalid user soporte [preauth]
Sep 19 14:24:14 nativespace-cdp sshd[3947665]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:24:14 nativespace-cdp sshd[3947665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.51.142
Sep 19 14:24:16 nativespace-cdp sshd[3947665]: Failed password for invalid user soporte from 142.93.51.142 port 45512 ssh2
Sep 19 14:24:16 nativespace-cdp sshd[3947665]: Received disconnect from 142.93.51.142 port 45512:11: Bye Bye [preauth]
Sep 19 14:24:16 nativespace-cdp sshd[3947665]: Disconnected from 142.93.51.142 port 45512 [preauth]
Sep 19 14:24:47 nativespace-cdp sshd[3948064]: Invalid user dockeruser from 189.7.17.61 port 56443
Sep 19 14:24:47 nativespace-cdp sshd[3948064]: input_userauth_request: invalid user dockeruser [preauth]
Sep 19 14:24:47 nativespace-cdp sshd[3948064]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:24:47 nativespace-cdp sshd[3948064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.17.61
Sep 19 14:24:49 nativespace-cdp sshd[3948064]: Failed password for invalid user dockeruser from 189.7.17.61 port 56443 ssh2
Sep 19 14:24:49 nativespace-cdp sshd[3948064]: Received disconnect from 189.7.17.61 port 56443:11: Bye Bye [preauth]
Sep 19 14:24:49 nativespace-cdp sshd[3948064]: Disconnected from 189.7.17.61 port 56443 [preauth]
Sep 19 14:26:06 nativespace-cdp sshd[3948462]: Invalid user soporte from 118.91.172.66 port 56478
Sep 19 14:26:06 nativespace-cdp sshd[3948462]: input_userauth_request: invalid user soporte [preauth]
Sep 19 14:26:06 nativespace-cdp sshd[3948462]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:26:06 nativespace-cdp sshd[3948462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.91.172.66
Sep 19 14:26:09 nativespace-cdp sshd[3948462]: Failed password for invalid user soporte from 118.91.172.66 port 56478 ssh2
Sep 19 14:26:15 nativespace-cdp sshd[3948485]: Invalid user jessica from 64.224.252.79 port 52004
Sep 19 14:26:15 nativespace-cdp sshd[3948485]: input_userauth_request: invalid user jessica [preauth]
Sep 19 14:26:15 nativespace-cdp sshd[3948485]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:26:15 nativespace-cdp sshd[3948485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.224.252.79
Sep 19 14:26:16 nativespace-cdp sshd[3948462]: Received disconnect from 118.91.172.66 port 56478:11: Bye Bye [preauth]
Sep 19 14:26:16 nativespace-cdp sshd[3948462]: Disconnected from 118.91.172.66 port 56478 [preauth]
Sep 19 14:26:18 nativespace-cdp sshd[3948485]: Failed password for invalid user jessica from 64.224.252.79 port 52004 ssh2
Sep 19 14:26:28 nativespace-cdp sshd[3948485]: Received disconnect from 64.224.252.79 port 52004:11: Bye Bye [preauth]
Sep 19 14:26:28 nativespace-cdp sshd[3948485]: Disconnected from 64.224.252.79 port 52004 [preauth]
Sep 19 14:26:32 nativespace-cdp sshd[3948595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.51.142  user=root
Sep 19 14:26:32 nativespace-cdp sshd[3948595]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 14:26:33 nativespace-cdp sshd[3948599]: Connection closed by 159.100.136.21 port 60234 [preauth]
Sep 19 14:26:34 nativespace-cdp sshd[3948595]: Failed password for root from 142.93.51.142 port 37302 ssh2
Sep 19 14:26:34 nativespace-cdp sshd[3948595]: Received disconnect from 142.93.51.142 port 37302:11: Bye Bye [preauth]
Sep 19 14:26:34 nativespace-cdp sshd[3948595]: Disconnected from 142.93.51.142 port 37302 [preauth]
Sep 19 14:26:43 nativespace-cdp sshd[3948615]: Invalid user soporte from 103.160.154.23 port 46926
Sep 19 14:26:43 nativespace-cdp sshd[3948615]: input_userauth_request: invalid user soporte [preauth]
Sep 19 14:26:43 nativespace-cdp sshd[3948615]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:26:43 nativespace-cdp sshd[3948615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.154.23
Sep 19 14:26:46 nativespace-cdp sshd[3948615]: Failed password for invalid user soporte from 103.160.154.23 port 46926 ssh2
Sep 19 14:26:46 nativespace-cdp sshd[3948615]: Received disconnect from 103.160.154.23 port 46926:11: Bye Bye [preauth]
Sep 19 14:26:46 nativespace-cdp sshd[3948615]: Disconnected from 103.160.154.23 port 46926 [preauth]
Sep 19 14:26:59 nativespace-cdp sshd[3948662]: Invalid user oracle from 64.224.252.79 port 43950
Sep 19 14:26:59 nativespace-cdp sshd[3948662]: input_userauth_request: invalid user oracle [preauth]
Sep 19 14:26:59 nativespace-cdp sshd[3948662]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:26:59 nativespace-cdp sshd[3948662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.224.252.79
Sep 19 14:27:00 nativespace-cdp sshd[3948662]: Failed password for invalid user oracle from 64.224.252.79 port 43950 ssh2
Sep 19 14:27:00 nativespace-cdp sshd[3948662]: Received disconnect from 64.224.252.79 port 43950:11: Bye Bye [preauth]
Sep 19 14:27:00 nativespace-cdp sshd[3948662]: Disconnected from 64.224.252.79 port 43950 [preauth]
Sep 19 14:27:30 nativespace-cdp sshd[3948772]: Invalid user ec2-user from 103.160.154.23 port 59670
Sep 19 14:27:30 nativespace-cdp sshd[3948772]: input_userauth_request: invalid user ec2-user [preauth]
Sep 19 14:27:30 nativespace-cdp sshd[3948772]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:27:30 nativespace-cdp sshd[3948772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.154.23
Sep 19 14:27:32 nativespace-cdp sshd[3948772]: Failed password for invalid user ec2-user from 103.160.154.23 port 59670 ssh2
Sep 19 14:27:32 nativespace-cdp sshd[3948772]: Received disconnect from 103.160.154.23 port 59670:11: Bye Bye [preauth]
Sep 19 14:27:32 nativespace-cdp sshd[3948772]: Disconnected from 103.160.154.23 port 59670 [preauth]
Sep 19 14:27:50 nativespace-cdp sshd[3948864]: Invalid user ec2-user from 142.93.51.142 port 39652
Sep 19 14:27:50 nativespace-cdp sshd[3948864]: input_userauth_request: invalid user ec2-user [preauth]
Sep 19 14:27:50 nativespace-cdp sshd[3948864]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:27:50 nativespace-cdp sshd[3948864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.51.142
Sep 19 14:27:53 nativespace-cdp sshd[3948864]: Failed password for invalid user ec2-user from 142.93.51.142 port 39652 ssh2
Sep 19 14:31:33 nativespace-cdp sshd[3949792]: Connection closed by 159.100.136.21 port 41408 [preauth]
Sep 19 14:32:54 nativespace-cdp sshd[3950467]: Invalid user ec2-user from 118.91.172.66 port 40404
Sep 19 14:32:54 nativespace-cdp sshd[3950467]: input_userauth_request: invalid user ec2-user [preauth]
Sep 19 14:32:54 nativespace-cdp sshd[3950467]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:32:54 nativespace-cdp sshd[3950467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.91.172.66
Sep 19 14:32:57 nativespace-cdp sshd[3950467]: Failed password for invalid user ec2-user from 118.91.172.66 port 40404 ssh2
Sep 19 14:32:58 nativespace-cdp sshd[3950467]: Received disconnect from 118.91.172.66 port 40404:11: Bye Bye [preauth]
Sep 19 14:32:58 nativespace-cdp sshd[3950467]: Disconnected from 118.91.172.66 port 40404 [preauth]
Sep 19 14:33:12 nativespace-cdp sshd[3950571]: Invalid user uftp from 189.7.17.61 port 55443
Sep 19 14:33:12 nativespace-cdp sshd[3950571]: input_userauth_request: invalid user uftp [preauth]
Sep 19 14:33:12 nativespace-cdp sshd[3950571]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:33:12 nativespace-cdp sshd[3950571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.17.61
Sep 19 14:33:13 nativespace-cdp sshd[3950571]: Failed password for invalid user uftp from 189.7.17.61 port 55443 ssh2
Sep 19 14:33:14 nativespace-cdp sshd[3950571]: Received disconnect from 189.7.17.61 port 55443:11: Bye Bye [preauth]
Sep 19 14:33:14 nativespace-cdp sshd[3950571]: Disconnected from 189.7.17.61 port 55443 [preauth]
Sep 19 14:34:39 nativespace-cdp sshd[3951058]: Invalid user admin123 from 118.91.172.66 port 52273
Sep 19 14:34:39 nativespace-cdp sshd[3951058]: input_userauth_request: invalid user admin123 [preauth]
Sep 19 14:34:39 nativespace-cdp sshd[3951058]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:34:39 nativespace-cdp sshd[3951058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.91.172.66
Sep 19 14:34:41 nativespace-cdp sshd[3951058]: Failed password for invalid user admin123 from 118.91.172.66 port 52273 ssh2
Sep 19 14:34:41 nativespace-cdp sshd[3951058]: Received disconnect from 118.91.172.66 port 52273:11: Bye Bye [preauth]
Sep 19 14:34:41 nativespace-cdp sshd[3951058]: Disconnected from 118.91.172.66 port 52273 [preauth]
Sep 19 14:34:48 nativespace-cdp sshd[3951109]: Invalid user test1 from 189.7.17.61 port 44868
Sep 19 14:34:48 nativespace-cdp sshd[3951109]: input_userauth_request: invalid user test1 [preauth]
Sep 19 14:34:48 nativespace-cdp sshd[3951109]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 14:34:48 nativespace-cdp sshd[3951109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.17.61
Sep 19 14:34:49 nativespace-cdp sshd[3951109]: Failed password for invalid user test1 from 189.7.17.61 port 44868 ssh2
Sep 19 14:34:49 nativespace-cdp sshd[3951109]: Received disconnect from 189.7.17.61 port 44868:11: Bye Bye [preauth]
Sep 19 14:34:49 nativespace-cdp sshd[3951109]: Disconnected from 189.7.17.61 port 44868 [preauth]
Sep 19 14:36:33 nativespace-cdp sshd[3951602]: Connection closed by 159.100.136.21 port 50902 [preauth]
Sep 19 14:41:34 nativespace-cdp sshd[3952796]: Connection closed by 159.100.136.21 port 60452 [preauth]
Sep 19 14:46:33 nativespace-cdp sshd[3953995]: Connection closed by 159.100.136.21 port 41554 [preauth]
Sep 19 14:51:33 nativespace-cdp sshd[3955764]: Connection closed by 159.100.136.21 port 50534 [preauth]
Sep 19 14:56:33 nativespace-cdp sshd[3956956]: Connection closed by 159.100.136.21 port 60212 [preauth]
Sep 19 15:01:33 nativespace-cdp sshd[3958128]: Connection closed by 159.100.136.21 port 41478 [preauth]
Sep 19 15:06:33 nativespace-cdp sshd[3959738]: Connection closed by 159.100.136.21 port 51006 [preauth]
Sep 19 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:07 nativespace-cdp sudo[3961006]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:07 nativespace-cdp sudo[3961012]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:08 nativespace-cdp sudo[3961015]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:08 nativespace-cdp sudo[3961024]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961027]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 15:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961050]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 15:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961053]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 15:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961056]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 15:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961059]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 15:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961062]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 15:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:14 nativespace-cdp sudo[3961065]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 15:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:22 nativespace-cdp sudo[3961188]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 15:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:23 nativespace-cdp sudo[3961193]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dickemery123 user-2=ptkxhsbt user-3=martsblo user-4=magichat user-5=lbhyisi user-6=hhdugcor user-7=strathar user-8=sarafoundation user-9=atestord user-10=lakesan1 user-11=brmrjxl user-12=musorguk user-13=megacards user-14=wilsonsw user-15=spectrum user-16=hodgesonweb user-17=theblack user-18=jarvisin user-19=stephani user-20=leereyn1 user-21=still user-22=agproduc user-23=athenare user-24=connect9 user-25=vantagep user-26=maflemin user-27=lbscrmod user-28=booff user-29=markward user-30=foundation user-31=ulsukarm user-32=alexadmin user-33=skyfirec user-34=nativene user-35=innovat1 user-36=askhform user-37=stuartge user-38=firstre2 user-39=vivienn1 user-40=battlere user-41=oneoarco user-42=brighto1 user-43=nstriton user-44=ggaaorgu user-45=belle user-46=newstoda user-47=bemadonn user-48=bedfords
Sep 19 15:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hubmaster user-50=carsinyo user-51=fetch user-52=gilpin user-53=milloyco user-54=elecleis user-55=connectedshoppin user-56=thqkgnbz user-57=accooper user-58=ianrayne user-59=coursemc user-60=opaiscyx user-61=jonhartl user-62=seftvta user-63=ultbcrra user-64=firstres user-65=firstred user-66=southlon user-67=highlegh user-68=firstrel user-69=clarkass user-70=costestimatorco user-71=paulmca1 user-72=howardon user-73=pugwash user-74=cwsocial user-75=cathski user-76=cambria1 user-77=reliable user-78=ninejimm user-79=eugincou user-80=courseme user-81=hirefootballgame user-82=lkpier user-83=philmcph user-84=ctedorgu user-85=firstre5 user-86=steakbridieme user-87=donnychicago user-88=nscdp user-89=health2045 user-90=fortunaz user-91=foods user-92=leftie user-93=hidden user-94=nomistakes user-95=tigerlet user-96=barbersh user-97=isleofwi user-98=smrszyqg user-99=nsceres user-100=burydropin user-101=fawcettd
Sep 19 15:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=beauty user-104=eatspam user-105=darkstar user-106=asandcoc user-107=sibtoncc user-108=steve user-109=bwppodcast user-110=zebrapho user-111=cath user-112=sketchy user-113=havantho user-114=nvihkvu user-115=oubpgvbx user-116=tstardom user-117=what user-118=design user-119=ladburyp user-120=stagingerris user-121=dancinggardener user-122=kategilpin user-123=boldover user-124=nove user-125=bakery user-126=sosevalu user-127=crrtipdl user-128=onlycont user-129=attlebor user-130=lucy user-131=romaldki user-132=hodgsonmail user-133=ranxterc user-134=outdoorc user-135=branko user-136=jennimil user-137=tomandle user-138=careers user-139=nbhavers user-140=david user-141=chrisdal user-142=mcdermos feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 15:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 15:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:24 nativespace-cdp sudo[3961200]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 15:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:25 nativespace-cdp sudo[3961206]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7x3nW6JaXsH6rh2Q.~
Sep 19 15:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:25 nativespace-cdp sudo[3961209]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7x3nW6JaXsH6rh2Q.~'
Sep 19 15:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:25 nativespace-cdp sudo[3961212]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7x3nW6JaXsH6rh2Q.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 15:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:25 nativespace-cdp sudo[3961216]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 15:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:25 nativespace-cdp sudo[3961219]: pam_unix(sudo:session): session closed for user root
Sep 19 15:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 15:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 15:10:32 nativespace-cdp sudo[3961253]: pam_unix(sudo:session): session closed for user root
Sep 19 15:11:33 nativespace-cdp sshd[3961611]: Connection closed by 159.100.136.21 port 60092 [preauth]
Sep 19 15:16:35 nativespace-cdp sshd[3963029]: Connection closed by 159.100.136.21 port 41258 [preauth]
Sep 19 15:21:35 nativespace-cdp sshd[3964449]: Connection closed by 159.100.136.21 port 50800 [preauth]
Sep 19 15:26:33 nativespace-cdp sshd[3966085]: Connection closed by 159.100.136.21 port 60680 [preauth]
Sep 19 15:31:33 nativespace-cdp sshd[3967549]: Connection closed by 159.100.136.21 port 41864 [preauth]
Sep 19 15:36:33 nativespace-cdp sshd[3969339]: Connection closed by 159.100.136.21 port 51404 [preauth]
Sep 19 15:41:33 nativespace-cdp sshd[3970911]: Connection closed by 159.100.136.21 port 60906 [preauth]
Sep 19 15:46:33 nativespace-cdp sshd[3972383]: Connection closed by 159.100.136.21 port 42340 [preauth]
Sep 19 15:51:33 nativespace-cdp sshd[3974273]: Connection closed by 159.100.136.21 port 51528 [preauth]
Sep 19 15:56:36 nativespace-cdp sshd[3975504]: Connection closed by 159.100.136.21 port 60716 [preauth]
Sep 19 16:01:33 nativespace-cdp sshd[3976765]: Connection closed by 159.100.136.21 port 41698 [preauth]
Sep 19 16:06:33 nativespace-cdp sshd[3978496]: Connection closed by 159.100.136.21 port 51304 [preauth]
Sep 19 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:08 nativespace-cdp sudo[3979382]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:08 nativespace-cdp sudo[3979387]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:12 nativespace-cdp sudo[3979390]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 16:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:12 nativespace-cdp sudo[3979401]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 16:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:14 nativespace-cdp sudo[3979404]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 16:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:14 nativespace-cdp sudo[3979469]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:15 nativespace-cdp sudo[3979474]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:15 nativespace-cdp sudo[3979478]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:15 nativespace-cdp sudo[3979483]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:15 nativespace-cdp sudo[3979489]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:15 nativespace-cdp sudo[3979494]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 16:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:22 nativespace-cdp sudo[3979540]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 16:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:23 nativespace-cdp sudo[3979547]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=burydropin user-3=fawcettd user-4=dhyana user-5=eatspam user-6=darkstar user-7=beauty user-8=sibtoncc user-9=asandcoc user-10=steve user-11=zebrapho user-12=bwppodcast user-13=howardon user-14=pugwash user-15=paulmca1 user-16=cwsocial user-17=ninejimm user-18=reliable user-19=cathski user-20=cambria1 user-21=courseme user-22=eugincou user-23=hirefootballgame user-24=ctedorgu user-25=philmcph user-26=firstre5 user-27=donnychicago user-28=steakbridieme user-29=lkpier user-30=health2045 user-31=fortunaz user-32=foods user-33=leftie user-34=nscdp user-35=barbersh user-36=tigerlet user-37=hidden user-38=nomistakes user-39=isleofwi user-40=smrszyqg user-41=onlycont user-42=attlebor user-43=lucy user-44=romaldki user-45=branko user-46=outdoorc user-47=hodgsonmail user-48=ranxterc
Sep 19 16:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jennimil user-50=tomandle user-51=careers user-52=nbhavers user-53=david user-54=mcdermos user-55=chrisdal user-56=nvihkvu user-57=cath user-58=sketchy user-59=havantho user-60=what user-61=tstardom user-62=oubpgvbx user-63=design user-64=kategilpin user-65=ladburyp user-66=dancinggardener user-67=stagingerris user-68=boldover user-69=nove user-70=sosevalu user-71=crrtipdl user-72=bakery user-73=hodgesonweb user-74=theblack user-75=spectrum user-76=jarvisin user-77=leereyn1 user-78=stephani user-79=still user-80=agproduc user-81=maflemin user-82=lbscrmod user-83=connect9 user-84=athenare user-85=vantagep user-86=markward user-87=foundation user-88=booff user-89=ulsukarm user-90=ptkxhsbt user-91=dickemery123 user-92=martsblo user-93=magichat user-94=lbhyisi user-95=hhdugcor user-96=sarafoundation user-97=atestord user-98=strathar user-99=lakesan1 user-100=brmrjxl user-101=musorguk user-102=megacards
Sep 19 16:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=wilsonsw user-104=carsinyo user-105=fetch user-106=hubmaster user-107=elecleis user-108=gilpin user-109=milloyco user-110=thqkgnbz user-111=connectedshoppin user-112=ianrayne user-113=accooper user-114=opaiscyx user-115=coursemc user-116=firstres user-117=jonhartl user-118=seftvta user-119=ultbcrra user-120=southlon user-121=highlegh user-122=firstred user-123=costestimatorco user-124=clarkass user-125=firstrel user-126=skyfirec user-127=alexadmin user-128=nativene user-129=askhform user-130=stuartge user-131=innovat1 user-132=battlere user-133=oneoarco user-134=firstre2 user-135=vivienn1 user-136=brighto1 user-137=nstriton user-138=bemadonn user-139=belle user-140=ggaaorgu user-141=newstoda user-142=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 16:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 16:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:24 nativespace-cdp sudo[3979556]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 16:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:25 nativespace-cdp sudo[3979564]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8IVGgdM03O2EqVtw.~
Sep 19 16:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:25 nativespace-cdp sudo[3979569]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8IVGgdM03O2EqVtw.~'
Sep 19 16:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:25 nativespace-cdp sudo[3979573]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8IVGgdM03O2EqVtw.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 16:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:25 nativespace-cdp sudo[3979580]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 16:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:25 nativespace-cdp sudo[3979585]: pam_unix(sudo:session): session closed for user root
Sep 19 16:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 16:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 16:10:43 nativespace-cdp sudo[3979643]: pam_unix(sudo:session): session closed for user root
Sep 19 16:11:33 nativespace-cdp sshd[3979879]: Connection closed by 159.100.136.21 port 60000 [preauth]
Sep 19 16:16:33 nativespace-cdp sshd[3981196]: Connection closed by 159.100.136.21 port 41714 [preauth]
Sep 19 16:21:33 nativespace-cdp sshd[3982914]: Connection closed by 159.100.136.21 port 51224 [preauth]
Sep 19 16:26:33 nativespace-cdp sshd[3984098]: Connection closed by 159.100.136.21 port 32964 [preauth]
Sep 19 16:31:33 nativespace-cdp sshd[3985348]: Connection closed by 159.100.136.21 port 42414 [preauth]
Sep 19 16:36:33 nativespace-cdp sshd[3986730]: Connection closed by 159.100.136.21 port 52338 [preauth]
Sep 19 16:41:34 nativespace-cdp sshd[3988195]: Connection closed by 159.100.136.21 port 33670 [preauth]
Sep 19 16:46:33 nativespace-cdp sshd[3989531]: Connection closed by 159.100.136.21 port 43526 [preauth]
Sep 19 16:51:33 nativespace-cdp sshd[3990908]: Connection closed by 159.100.136.21 port 53342 [preauth]
Sep 19 16:56:33 nativespace-cdp sshd[3992455]: Connection closed by 159.100.136.21 port 35086 [preauth]
Sep 19 17:01:33 nativespace-cdp sshd[3993793]: Connection closed by 159.100.136.21 port 44438 [preauth]
Sep 19 17:06:33 nativespace-cdp sshd[3995695]: Connection closed by 159.100.136.21 port 54486 [preauth]
Sep 19 17:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 17:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:11 nativespace-cdp sudo[3996657]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:11 nativespace-cdp sudo[3996660]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:12 nativespace-cdp sudo[3996663]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:12 nativespace-cdp sudo[3996677]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:32 nativespace-cdp sudo[3996681]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 17:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:32 nativespace-cdp sudo[3996768]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 17:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:33 nativespace-cdp sudo[3996771]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 17:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:33 nativespace-cdp sudo[3996774]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 17:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:33 nativespace-cdp sudo[3996777]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 17:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:33 nativespace-cdp sudo[3996780]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 17:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:33 nativespace-cdp sudo[3996783]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 17:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:35 nativespace-cdp sudo[3996794]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 17:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:36 nativespace-cdp sudo[3996798]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=theblack user-3=hodgesonweb user-4=spectrum user-5=agproduc user-6=still user-7=leereyn1 user-8=stephani user-9=booff user-10=markward user-11=foundation user-12=lbscrmod user-13=maflemin user-14=vantagep user-15=athenare user-16=connect9 user-17=ulsukarm user-18=martsblo user-19=ptkxhsbt user-20=dickemery123 user-21=hhdugcor user-22=lbhyisi user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=atestord user-27=sarafoundation user-28=strathar user-29=wilsonsw user-30=megacards user-31=musorguk user-32=elecleis user-33=gilpin user-34=milloyco user-35=fetch user-36=carsinyo user-37=hubmaster user-38=ianrayne user-39=accooper user-40=thqkgnbz user-41=connectedshoppin user-42=firstres user-43=ultbcrra user-44=seftvta user-45=jonhartl user-46=opaiscyx user-47=coursemc
Sep 19 17:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=costestimatorco user-49=firstrel user-50=clarkass user-51=highlegh user-52=southlon user-53=firstred user-54=alexadmin user-55=skyfirec user-56=askhform user-57=stuartge user-58=innovat1 user-59=nativene user-60=nstriton user-61=brighto1 user-62=oneoarco user-63=battlere user-64=vivienn1 user-65=firstre2 user-66=bedfords user-67=bemadonn user-68=newstoda user-69=ggaaorgu user-70=belle user-71=fawcettd user-72=burydropin user-73=nsceres user-74=darkstar user-75=eatspam user-76=beauty user-77=dhyana user-78=asandcoc user-79=sibtoncc user-80=zebrapho user-81=bwppodcast user-82=steve user-83=ninejimm user-84=reliable user-85=cathski user-86=cambria1 user-87=cwsocial user-88=howardon user-89=paulmca1 user-90=pugwash user-91=hirefootballgame user-92=courseme user-93=eugincou user-94=leftie user-95=foods user-96=health2045 user-97=fortunaz user-98=nscdp user-99=firstre5 user-100=donnychicago
Sep 19 17:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-101=steakbridieme user-102=ctedorgu user-103=philmcph user-104=lkpier user-105=smrszyqg user-106=isleofwi user-107=tigerlet user-108=barbersh user-109=nomistakes user-110=hidden user-111=lucy user-112=attlebor user-113=onlycont user-114=branko user-115=hodgsonmail user-116=outdoorc user-117=ranxterc user-118=romaldki user-119=tomandle user-120=jennimil user-121=mcdermos user-122=chrisdal user-123=david user-124=careers user-125=nbhavers user-126=what user-127=oubpgvbx user-128=tstardom user-129=nvihkvu user-130=havantho user-131=sketchy user-132=cath user-133=kategilpin user-134=stagingerris user-135=dancinggardener user-136=ladburyp user-137=design user-138=nove user-139=boldover user-140=crrtipdl user-141=sosevalu user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 19 17:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 17:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:37 nativespace-cdp sudo[3996808]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 17:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:38 nativespace-cdp sudo[3996817]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-61lMSiryO04xmmQy.~
Sep 19 17:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:38 nativespace-cdp sudo[3996820]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-61lMSiryO04xmmQy.~'
Sep 19 17:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:38 nativespace-cdp sudo[3996823]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-61lMSiryO04xmmQy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 17:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:38 nativespace-cdp sudo[3996827]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 17:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:38 nativespace-cdp sudo[3996831]: pam_unix(sudo:session): session closed for user root
Sep 19 17:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 17:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 17:10:49 nativespace-cdp sudo[3996884]: pam_unix(sudo:session): session closed for user root
Sep 19 17:11:33 nativespace-cdp sshd[3997096]: Connection closed by 159.100.136.21 port 36048 [preauth]
Sep 19 17:16:33 nativespace-cdp sshd[3998334]: Connection closed by 159.100.136.21 port 46226 [preauth]
Sep 19 17:21:33 nativespace-cdp sshd[3999591]: Connection closed by 159.100.136.21 port 55812 [preauth]
Sep 19 17:26:33 nativespace-cdp sshd[4000931]: Connection closed by 159.100.136.21 port 37550 [preauth]
Sep 19 17:31:35 nativespace-cdp sshd[4002333]: Connection closed by 159.100.136.21 port 47264 [preauth]
Sep 19 17:36:36 nativespace-cdp sshd[4004071]: Connection closed by 159.100.136.21 port 57340 [preauth]
Sep 19 17:41:33 nativespace-cdp sshd[4005287]: Connection closed by 159.100.136.21 port 38154 [preauth]
Sep 19 17:46:33 nativespace-cdp sshd[4007127]: Connection closed by 159.100.136.21 port 48100 [preauth]
Sep 19 17:46:37 nativespace-cdp sshd[4007147]: Invalid user scan from 159.223.162.68 port 43610
Sep 19 17:46:37 nativespace-cdp sshd[4007147]: input_userauth_request: invalid user scan [preauth]
Sep 19 17:46:37 nativespace-cdp sshd[4007147]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 17:46:37 nativespace-cdp sshd[4007147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.162.68
Sep 19 17:46:39 nativespace-cdp sshd[4007147]: Failed password for invalid user scan from 159.223.162.68 port 43610 ssh2
Sep 19 17:46:39 nativespace-cdp sshd[4007147]: Received disconnect from 159.223.162.68 port 43610:11: Bye Bye [preauth]
Sep 19 17:46:39 nativespace-cdp sshd[4007147]: Disconnected from 159.223.162.68 port 43610 [preauth]
Sep 19 17:50:10 nativespace-cdp sshd[4008492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.16.147.253  user=root
Sep 19 17:50:10 nativespace-cdp sshd[4008492]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 17:50:12 nativespace-cdp sshd[4008492]: Failed password for root from 201.16.147.253 port 36204 ssh2
Sep 19 17:50:13 nativespace-cdp sshd[4008492]: Received disconnect from 201.16.147.253 port 36204:11: Bye Bye [preauth]
Sep 19 17:50:13 nativespace-cdp sshd[4008492]: Disconnected from 201.16.147.253 port 36204 [preauth]
Sep 19 17:51:00 nativespace-cdp sshd[4008688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.188.127.201  user=root
Sep 19 17:51:00 nativespace-cdp sshd[4008688]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 17:51:02 nativespace-cdp sshd[4008688]: Failed password for root from 196.188.127.201 port 40616 ssh2
Sep 19 17:51:02 nativespace-cdp sshd[4008688]: Received disconnect from 196.188.127.201 port 40616:11: Bye Bye [preauth]
Sep 19 17:51:02 nativespace-cdp sshd[4008688]: Disconnected from 196.188.127.201 port 40616 [preauth]
Sep 19 17:51:35 nativespace-cdp sshd[4008803]: Connection closed by 159.100.136.21 port 57840 [preauth]
Sep 19 17:51:49 nativespace-cdp sshd[4008840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.162.68  user=root
Sep 19 17:51:49 nativespace-cdp sshd[4008840]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 17:51:52 nativespace-cdp sshd[4008840]: Failed password for root from 159.223.162.68 port 48142 ssh2
Sep 19 17:51:52 nativespace-cdp sshd[4008840]: Received disconnect from 159.223.162.68 port 48142:11: Bye Bye [preauth]
Sep 19 17:51:52 nativespace-cdp sshd[4008840]: Disconnected from 159.223.162.68 port 48142 [preauth]
Sep 19 17:52:26 nativespace-cdp sshd[4008945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.162.68  user=root
Sep 19 17:52:26 nativespace-cdp sshd[4008945]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 17:52:28 nativespace-cdp sshd[4008945]: Failed password for root from 159.223.162.68 port 38792 ssh2
Sep 19 17:52:32 nativespace-cdp sshd[4008978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.188.127.201  user=root
Sep 19 17:52:32 nativespace-cdp sshd[4008978]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 17:52:32 nativespace-cdp sshd[4008945]: Received disconnect from 159.223.162.68 port 38792:11: Bye Bye [preauth]
Sep 19 17:52:32 nativespace-cdp sshd[4008945]: Disconnected from 159.223.162.68 port 38792 [preauth]
Sep 19 17:52:34 nativespace-cdp sshd[4008978]: Failed password for root from 196.188.127.201 port 50164 ssh2
Sep 19 17:52:34 nativespace-cdp sshd[4008978]: Received disconnect from 196.188.127.201 port 50164:11: Bye Bye [preauth]
Sep 19 17:52:34 nativespace-cdp sshd[4008978]: Disconnected from 196.188.127.201 port 50164 [preauth]
Sep 19 17:53:01 nativespace-cdp sshd[4009061]: Connection closed by 201.16.147.253 port 41570 [preauth]
Sep 19 17:53:17 nativespace-cdp sshd[4009120]: Invalid user scan from 196.188.127.201 port 38540
Sep 19 17:53:17 nativespace-cdp sshd[4009120]: input_userauth_request: invalid user scan [preauth]
Sep 19 17:53:17 nativespace-cdp sshd[4009120]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 17:53:17 nativespace-cdp sshd[4009120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.188.127.201
Sep 19 17:53:18 nativespace-cdp sshd[4009120]: Failed password for invalid user scan from 196.188.127.201 port 38540 ssh2
Sep 19 17:53:19 nativespace-cdp sshd[4009120]: Received disconnect from 196.188.127.201 port 38540:11: Bye Bye [preauth]
Sep 19 17:53:19 nativespace-cdp sshd[4009120]: Disconnected from 196.188.127.201 port 38540 [preauth]
Sep 19 17:53:41 nativespace-cdp sshd[4009216]: Invalid user caja from 201.16.147.253 port 42924
Sep 19 17:53:41 nativespace-cdp sshd[4009216]: input_userauth_request: invalid user caja [preauth]
Sep 19 17:53:41 nativespace-cdp sshd[4009216]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 17:53:41 nativespace-cdp sshd[4009216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.16.147.253
Sep 19 17:53:43 nativespace-cdp sshd[4009216]: Failed password for invalid user caja from 201.16.147.253 port 42924 ssh2
Sep 19 17:53:43 nativespace-cdp sshd[4009216]: Received disconnect from 201.16.147.253 port 42924:11: Bye Bye [preauth]
Sep 19 17:53:43 nativespace-cdp sshd[4009216]: Disconnected from 201.16.147.253 port 42924 [preauth]
Sep 19 17:54:25 nativespace-cdp sshd[4009327]: Invalid user ec2-user from 201.16.147.253 port 54544
Sep 19 17:54:25 nativespace-cdp sshd[4009327]: input_userauth_request: invalid user ec2-user [preauth]
Sep 19 17:54:25 nativespace-cdp sshd[4009327]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 17:54:25 nativespace-cdp sshd[4009327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.16.147.253
Sep 19 17:54:27 nativespace-cdp sshd[4009327]: Failed password for invalid user ec2-user from 201.16.147.253 port 54544 ssh2
Sep 19 17:54:27 nativespace-cdp sshd[4009327]: Received disconnect from 201.16.147.253 port 54544:11: Bye Bye [preauth]
Sep 19 17:54:27 nativespace-cdp sshd[4009327]: Disconnected from 201.16.147.253 port 54544 [preauth]
Sep 19 17:56:33 nativespace-cdp sshd[4009957]: Connection closed by 159.100.136.21 port 39186 [preauth]
Sep 19 18:01:33 nativespace-cdp sshd[4011217]: Connection closed by 159.100.136.21 port 48874 [preauth]
Sep 19 18:06:36 nativespace-cdp sshd[4012645]: Connection closed by 159.100.136.21 port 58370 [preauth]
Sep 19 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:22 nativespace-cdp sudo[4013796]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:22 nativespace-cdp sudo[4013799]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 18:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:24 nativespace-cdp sudo[4013802]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 18:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:24 nativespace-cdp sudo[4013810]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 18:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013813]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 18:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013896]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 18:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013901]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 18:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013905]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 18:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013910]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 18:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013916]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 18:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:32 nativespace-cdp sudo[4013921]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 18:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:35 nativespace-cdp sudo[4013932]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 18:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:36 nativespace-cdp sudo[4013938]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=leereyn1 user-2=stephani user-3=agproduc user-4=still user-5=hodgesonweb user-6=theblack user-7=spectrum user-8=jarvisin user-9=ulsukarm user-10=lbscrmod user-11=maflemin user-12=vantagep user-13=athenare user-14=connect9 user-15=booff user-16=markward user-17=foundation user-18=magichat user-19=hhdugcor user-20=lbhyisi user-21=ptkxhsbt user-22=dickemery123 user-23=martsblo user-24=megacards user-25=musorguk user-26=wilsonsw user-27=atestord user-28=sarafoundation user-29=strathar user-30=lakesan1 user-31=brmrjxl user-32=thqkgnbz user-33=connectedshoppin user-34=ianrayne user-35=accooper user-36=fetch user-37=carsinyo user-38=hubmaster user-39=elecleis user-40=gilpin user-41=milloyco user-42=highlegh user-43=southlon user-44=firstred user-45=costestimatorco user-46=clarkass user-47=firstrel
Sep 19 18:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=coursemc user-50=firstres user-51=ultbcrra user-52=seftvta user-53=jonhartl user-54=nativene user-55=stuartge user-56=askhform user-57=innovat1 user-58=alexadmin user-59=skyfirec user-60=bemadonn user-61=newstoda user-62=belle user-63=ggaaorgu user-64=bedfords user-65=oneoarco user-66=battlere user-67=vivienn1 user-68=firstre2 user-69=nstriton user-70=brighto1 user-71=dhyana user-72=darkstar user-73=eatspam user-74=beauty user-75=nsceres user-76=fawcettd user-77=burydropin user-78=steve user-79=zebrapho user-80=bwppodcast user-81=asandcoc user-82=sibtoncc user-83=courseme user-84=eugincou user-85=hirefootballgame user-86=cwsocial user-87=howardon user-88=pugwash user-89=paulmca1 user-90=reliable user-91=ninejimm user-92=cathski user-93=cambria1 user-94=tigerlet user-95=barbersh user-96=nomistakes user-97=hidden user-98=isleofwi user-99=smrszyqg user-100=firstre5 user-101=steakbridieme
Sep 19 18:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=donnychicago user-103=ctedorgu user-104=philmcph user-105=lkpier user-106=leftie user-107=foods user-108=health2045 user-109=fortunaz user-110=nscdp user-111=romaldki user-112=branko user-113=ranxterc user-114=outdoorc user-115=hodgsonmail user-116=onlycont user-117=lucy user-118=attlebor user-119=david user-120=nbhavers user-121=careers user-122=mcdermos user-123=chrisdal user-124=jennimil user-125=tomandle user-126=design user-127=kategilpin user-128=stagingerris user-129=dancinggardener user-130=ladburyp user-131=nvihkvu user-132=havantho user-133=cath user-134=sketchy user-135=what user-136=tstardom user-137=oubpgvbx user-138=crrtipdl user-139=sosevalu user-140=bakery user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 18:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 18:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:37 nativespace-cdp sudo[4013947]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 18:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:38 nativespace-cdp sudo[4013961]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9t2Ngk8ZEs8s0ibv.~
Sep 19 18:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:39 nativespace-cdp sudo[4013966]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9t2Ngk8ZEs8s0ibv.~'
Sep 19 18:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:39 nativespace-cdp sudo[4013970]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9t2Ngk8ZEs8s0ibv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 18:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:39 nativespace-cdp sudo[4013977]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 18:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:39 nativespace-cdp sudo[4013982]: pam_unix(sudo:session): session closed for user root
Sep 19 18:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 18:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 18:10:40 nativespace-cdp sudo[4014007]: pam_unix(sudo:session): session closed for user root
Sep 19 18:11:34 nativespace-cdp sshd[4014168]: Connection closed by 159.100.136.21 port 39526 [preauth]
Sep 19 18:16:35 nativespace-cdp sshd[4015519]: Connection closed by 159.100.136.21 port 48814 [preauth]
Sep 19 18:21:34 nativespace-cdp sshd[4016789]: Connection closed by 159.100.136.21 port 58408 [preauth]
Sep 19 18:26:33 nativespace-cdp sshd[4018151]: Connection closed by 159.100.136.21 port 39628 [preauth]
Sep 19 18:31:33 nativespace-cdp sshd[4019321]: Connection closed by 159.100.136.21 port 48878 [preauth]
Sep 19 18:36:34 nativespace-cdp sshd[4020934]: Connection closed by 159.100.136.21 port 58574 [preauth]
Sep 19 18:41:33 nativespace-cdp sshd[4022076]: Connection closed by 159.100.136.21 port 39898 [preauth]
Sep 19 18:46:35 nativespace-cdp sshd[4023099]: Connection closed by 159.100.136.21 port 49680 [preauth]
Sep 19 18:51:36 nativespace-cdp sshd[4024316]: Connection closed by 159.100.136.21 port 58730 [preauth]
Sep 19 18:56:33 nativespace-cdp sshd[4025395]: Connection closed by 159.100.136.21 port 40106 [preauth]
Sep 19 19:01:33 nativespace-cdp sshd[4026848]: Connection closed by 159.100.136.21 port 49536 [preauth]
Sep 19 19:06:33 nativespace-cdp sshd[4028531]: Connection closed by 159.100.136.21 port 59290 [preauth]
Sep 19 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:09:59 nativespace-cdp sudo[4029203]: pam_unix(sudo:session): session closed for user root
Sep 19 19:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 19:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:09:59 nativespace-cdp sudo[4029207]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 19:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:00 nativespace-cdp sudo[4029212]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 19:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:01 nativespace-cdp sudo[4029221]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 19:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029227]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029390]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029393]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029396]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029399]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029402]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 19:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:08 nativespace-cdp sudo[4029406]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 19:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:11 nativespace-cdp sudo[4029428]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 19:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:15 nativespace-cdp sudo[4029444]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstres user-2=seftvta user-3=jonhartl user-4=ultbcrra user-5=coursemc user-6=opaiscyx user-7=costestimatorco user-8=clarkass user-9=firstrel user-10=southlon user-11=highlegh user-12=firstred user-13=elecleis user-14=milloyco user-15=gilpin user-16=carsinyo user-17=fetch user-18=hubmaster user-19=ianrayne user-20=accooper user-21=thqkgnbz user-22=connectedshoppin user-23=brighto1 user-24=nstriton user-25=battlere user-26=oneoarco user-27=firstre2 user-28=vivienn1 user-29=bedfords user-30=bemadonn user-31=belle user-32=ggaaorgu user-33=newstoda user-34=skyfirec user-35=alexadmin user-36=stuartge user-37=askhform user-38=innovat1 user-39=nativene user-40=markward user-41=booff user-42=foundation user-43=maflemin user-44=lbscrmod user-45=connect9 user-46=athenare user-47=vantagep user-48=ulsukarm
Sep 19 19:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jarvisin user-50=hodgesonweb user-51=theblack user-52=spectrum user-53=still user-54=agproduc user-55=leereyn1 user-56=stephani user-57=brmrjxl user-58=lakesan1 user-59=sarafoundation user-60=atestord user-61=strathar user-62=wilsonsw user-63=musorguk user-64=megacards user-65=martsblo user-66=ptkxhsbt user-67=dickemery123 user-68=lbhyisi user-69=hhdugcor user-70=magichat user-71=tomandle user-72=jennimil user-73=mcdermos user-74=chrisdal user-75=careers user-76=nbhavers user-77=david user-78=attlebor user-79=lucy user-80=onlycont user-81=branko user-82=ranxterc user-83=outdoorc user-84=hodgsonmail user-85=romaldki user-86=nove user-87=boldover user-88=sosevalu user-89=crrtipdl user-90=bakery user-91=what user-92=oubpgvbx user-93=tstardom user-94=nvihkvu user-95=cath user-96=sketchy user-97=havantho user-98=kategilpin user-99=ladburyp user-100=dancinggardener user-101=stagingerris user-102=design
Sep 19 19:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=zebrapho user-106=bwppodcast user-107=steve user-108=burydropin user-109=fawcettd user-110=nsceres user-111=eatspam user-112=darkstar user-113=beauty user-114=dhyana user-115=fortunaz user-116=health2045 user-117=leftie user-118=foods user-119=nscdp user-120=philmcph user-121=ctedorgu user-122=steakbridieme user-123=firstre5 user-124=donnychicago user-125=lkpier user-126=smrszyqg user-127=isleofwi user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=ninejimm user-133=reliable user-134=cathski user-135=cambria1 user-136=howardon user-137=paulmca1 user-138=pugwash user-139=cwsocial user-140=hirefootballgame user-141=courseme user-142=eugincou feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 19:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 19:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:16 nativespace-cdp sudo[4029456]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 19:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:17 nativespace-cdp sudo[4029467]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gulHhm6X23sMNIWD.~
Sep 19 19:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:17 nativespace-cdp sudo[4029470]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gulHhm6X23sMNIWD.~'
Sep 19 19:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:17 nativespace-cdp sudo[4029473]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gulHhm6X23sMNIWD.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 19:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:17 nativespace-cdp sudo[4029477]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 19:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:17 nativespace-cdp sudo[4029480]: pam_unix(sudo:session): session closed for user root
Sep 19 19:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 19:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 19:10:21 nativespace-cdp sudo[4029507]: pam_unix(sudo:session): session closed for user root
Sep 19 19:11:33 nativespace-cdp sshd[4029925]: Connection closed by 159.100.136.21 port 39036 [preauth]
Sep 19 19:16:34 nativespace-cdp sshd[4031244]: Connection closed by 159.100.136.21 port 48432 [preauth]
Sep 19 19:21:35 nativespace-cdp sshd[4032769]: Connection closed by 159.100.136.21 port 57882 [preauth]
Sep 19 19:26:33 nativespace-cdp sshd[4033776]: Connection closed by 159.100.136.21 port 38228 [preauth]
Sep 19 19:29:33 nativespace-cdp sshd[4034257]: Connection closed by 199.45.155.74 port 45454 [preauth]
Sep 19 19:31:34 nativespace-cdp sshd[4034882]: Connection closed by 159.100.136.21 port 46596 [preauth]
Sep 19 19:36:33 nativespace-cdp sshd[4036895]: Connection closed by 159.100.136.21 port 56004 [preauth]
Sep 19 19:41:34 nativespace-cdp sshd[4038388]: Connection closed by 159.100.136.21 port 37224 [preauth]
Sep 19 19:46:36 nativespace-cdp sshd[4039600]: Connection closed by 159.100.136.21 port 46986 [preauth]
Sep 19 19:51:33 nativespace-cdp sshd[4040969]: Connection closed by 159.100.136.21 port 56730 [preauth]
Sep 19 19:56:33 nativespace-cdp sshd[4042714]: Connection closed by 159.100.136.21 port 38472 [preauth]
Sep 19 20:01:34 nativespace-cdp sshd[4043988]: Connection closed by 159.100.136.21 port 47518 [preauth]
Sep 19 20:06:33 nativespace-cdp sshd[4045584]: Connection closed by 159.100.136.21 port 57032 [preauth]
Sep 19 20:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 20:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:10 nativespace-cdp sudo[4046366]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 20:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:10 nativespace-cdp sudo[4046370]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 20:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:12 nativespace-cdp sudo[4046375]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 20:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:12 nativespace-cdp sudo[4046388]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 20:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:18 nativespace-cdp sudo[4046394]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 20:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:18 nativespace-cdp sudo[4046419]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 20:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:18 nativespace-cdp sudo[4046424]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 20:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:19 nativespace-cdp sudo[4046428]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 20:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:19 nativespace-cdp sudo[4046433]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 20:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:19 nativespace-cdp sudo[4046439]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 20:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:19 nativespace-cdp sudo[4046444]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 20:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:22 nativespace-cdp sudo[4046464]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 20:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:23 nativespace-cdp sudo[4046476]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=fetch user-3=carsinyo user-4=gilpin user-5=milloyco user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=opaiscyx user-12=coursemc user-13=ultbcrra user-14=seftvta user-15=jonhartl user-16=firstres user-17=firstred user-18=highlegh user-19=southlon user-20=firstrel user-21=clarkass user-22=costestimatorco user-23=skyfirec user-24=alexadmin user-25=nativene user-26=innovat1 user-27=stuartge user-28=askhform user-29=vivienn1 user-30=firstre2 user-31=oneoarco user-32=battlere user-33=nstriton user-34=brighto1 user-35=newstoda user-36=ggaaorgu user-37=belle user-38=bemadonn user-39=bedfords user-40=spectrum user-41=theblack user-42=hodgesonweb user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=agproduc user-47=still
Sep 19 20:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=vantagep user-49=connect9 user-50=athenare user-51=lbscrmod user-52=maflemin user-53=markward user-54=booff user-55=foundation user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=hhdugcor user-62=lbhyisi user-63=strathar user-64=atestord user-65=sarafoundation user-66=brmrjxl user-67=lakesan1 user-68=megacards user-69=musorguk user-70=wilsonsw user-71=onlycont user-72=lucy user-73=attlebor user-74=romaldki user-75=outdoorc user-76=hodgsonmail user-77=ranxterc user-78=branko user-79=jennimil user-80=tomandle user-81=david user-82=careers user-83=nbhavers user-84=chrisdal user-85=mcdermos user-86=havantho user-87=sketchy user-88=cath user-89=nvihkvu user-90=tstardom user-91=oubpgvbx user-92=what user-93=design user-94=stagingerris user-95=dancinggardener user-96=ladburyp user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=crrtipdl
Sep 19 20:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=sosevalu user-103=nsceres user-104=fawcettd user-105=burydropin user-106=dhyana user-107=beauty user-108=darkstar user-109=eatspam user-110=asandcoc user-111=sibtoncc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=cwsocial user-116=howardon user-117=paulmca1 user-118=pugwash user-119=cambria1 user-120=cathski user-121=reliable user-122=ninejimm user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=firstre5 user-128=steakbridieme user-129=donnychicago user-130=philmcph user-131=ctedorgu user-132=nscdp user-133=foods user-134=leftie user-135=fortunaz user-136=health2045 user-137=nomistakes user-138=hidden user-139=barbersh user-140=tigerlet user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 19 20:10:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 20:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:25 nativespace-cdp sudo[4046489]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 20:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:26 nativespace-cdp sudo[4046499]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GOh17wuteHJCAjuG.~
Sep 19 20:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:26 nativespace-cdp sudo[4046504]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GOh17wuteHJCAjuG.~'
Sep 19 20:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:26 nativespace-cdp sudo[4046508]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GOh17wuteHJCAjuG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 20:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:26 nativespace-cdp sudo[4046514]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 20:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:26 nativespace-cdp sudo[4046519]: pam_unix(sudo:session): session closed for user root
Sep 19 20:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 20:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 20:10:34 nativespace-cdp sudo[4046573]: pam_unix(sudo:session): session closed for user root
Sep 19 20:11:35 nativespace-cdp sshd[4046871]: Connection closed by 159.100.136.21 port 38094 [preauth]
Sep 19 20:16:33 nativespace-cdp sshd[4047913]: Connection closed by 159.100.136.21 port 47610 [preauth]
Sep 19 20:21:34 nativespace-cdp sshd[4049460]: Connection closed by 159.100.136.21 port 56708 [preauth]
Sep 19 20:26:33 nativespace-cdp sshd[4050546]: Connection closed by 159.100.136.21 port 38194 [preauth]
Sep 19 20:31:33 nativespace-cdp sshd[4051679]: Connection closed by 159.100.136.21 port 47472 [preauth]
Sep 19 20:36:33 nativespace-cdp sshd[4052984]: Connection closed by 159.100.136.21 port 57056 [preauth]
Sep 19 20:41:33 nativespace-cdp sshd[4054528]: Connection closed by 159.100.136.21 port 37810 [preauth]
Sep 19 20:46:33 nativespace-cdp sshd[4055823]: Connection closed by 159.100.136.21 port 46972 [preauth]
Sep 19 20:51:33 nativespace-cdp sshd[4057378]: Connection closed by 159.100.136.21 port 56382 [preauth]
Sep 19 20:56:33 nativespace-cdp sshd[4058520]: Connection closed by 159.100.136.21 port 37528 [preauth]
Sep 19 21:01:33 nativespace-cdp sshd[4059908]: Connection closed by 159.100.136.21 port 46904 [preauth]
Sep 19 21:06:33 nativespace-cdp sshd[4061489]: Connection closed by 159.100.136.21 port 56462 [preauth]
Sep 19 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:09:59 nativespace-cdp sudo[4062097]: pam_unix(sudo:session): session closed for user root
Sep 19 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:09:59 nativespace-cdp sudo[4062102]: pam_unix(sudo:session): session closed for user root
Sep 19 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:00 nativespace-cdp sudo[4062107]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:00 nativespace-cdp sudo[4062113]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062119]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062259]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062263]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062266]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062269]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062272]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 21:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:07 nativespace-cdp sudo[4062275]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:13 nativespace-cdp sudo[4062296]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:14 nativespace-cdp sudo[4062302]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hhdugcor user-2=lbhyisi user-3=magichat user-4=martsblo user-5=ptkxhsbt user-6=dickemery123 user-7=wilsonsw user-8=megacards user-9=musorguk user-10=brmrjxl user-11=lakesan1 user-12=atestord user-13=sarafoundation user-14=strathar user-15=agproduc user-16=still user-17=leereyn1 user-18=stephani user-19=jarvisin user-20=hodgesonweb user-21=theblack user-22=spectrum user-23=ulsukarm user-24=markward user-25=booff user-26=foundation user-27=lbscrmod user-28=maflemin user-29=vantagep user-30=connect9 user-31=athenare user-32=askhform user-33=stuartge user-34=innovat1 user-35=nativene user-36=skyfirec user-37=alexadmin user-38=bedfords user-39=bemadonn user-40=newstoda user-41=belle user-42=ggaaorgu user-43=nstriton user-44=brighto1 user-45=oneoarco user-46=battlere user-47=vivienn1 user-48=firstre2
Sep 19 21:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ianrayne user-50=accooper user-51=thqkgnbz user-52=connectedshoppin user-53=elecleis user-54=gilpin user-55=milloyco user-56=fetch user-57=carsinyo user-58=hubmaster user-59=costestimatorco user-60=firstrel user-61=clarkass user-62=highlegh user-63=southlon user-64=firstred user-65=firstres user-66=ultbcrra user-67=jonhartl user-68=seftvta user-69=coursemc user-70=opaiscyx user-71=hirefootballgame user-72=courseme user-73=eugincou user-74=reliable user-75=ninejimm user-76=cambria1 user-77=cathski user-78=cwsocial user-79=pugwash user-80=howardon user-81=paulmca1 user-82=smrszyqg user-83=isleofwi user-84=tigerlet user-85=barbersh user-86=nomistakes user-87=hidden user-88=leftie user-89=foods user-90=fortunaz user-91=health2045 user-92=nscdp user-93=firstre5 user-94=steakbridieme user-95=donnychicago user-96=ctedorgu user-97=philmcph user-98=lkpier user-99=darkstar user-100=eatspam user-101=beauty
Sep 19 21:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=fawcettd user-104=burydropin user-105=nsceres user-106=zebrapho user-107=bwppodcast user-108=steve user-109=asandcoc user-110=sibtoncc user-111=kategilpin user-112=dancinggardener user-113=stagingerris user-114=ladburyp user-115=design user-116=what user-117=oubpgvbx user-118=tstardom user-119=nvihkvu user-120=havantho user-121=cath user-122=sketchy user-123=crrtipdl user-124=sosevalu user-125=bakery user-126=nove user-127=boldover user-128=branko user-129=hodgsonmail user-130=outdoorc user-131=ranxterc user-132=romaldki user-133=lucy user-134=attlebor user-135=onlycont user-136=mcdermos user-137=chrisdal user-138=david user-139=careers user-140=nbhavers user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 21:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 21:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:16 nativespace-cdp sudo[4062310]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 21:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:16 nativespace-cdp sudo[4062316]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Krc6YfOaRLDuw6FL.~
Sep 19 21:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:17 nativespace-cdp sudo[4062319]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Krc6YfOaRLDuw6FL.~'
Sep 19 21:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:17 nativespace-cdp sudo[4062323]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Krc6YfOaRLDuw6FL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 21:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:17 nativespace-cdp sudo[4062327]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 21:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:17 nativespace-cdp sudo[4062330]: pam_unix(sudo:session): session closed for user root
Sep 19 21:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 21:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 21:10:29 nativespace-cdp sudo[4062369]: pam_unix(sudo:session): session closed for user root
Sep 19 21:11:33 nativespace-cdp sshd[4062688]: Connection closed by 159.100.136.21 port 36666 [preauth]
Sep 19 21:16:34 nativespace-cdp sshd[4063792]: Connection closed by 159.100.136.21 port 46316 [preauth]
Sep 19 21:21:33 nativespace-cdp sshd[4065354]: Connection closed by 159.100.136.21 port 55708 [preauth]
Sep 19 21:26:37 nativespace-cdp sshd[4066606]: Connection closed by 159.100.136.21 port 36760 [preauth]
Sep 19 21:29:54 nativespace-cdp sshd[4067223]: Invalid user abhishek from 41.93.31.70 port 59514
Sep 19 21:29:54 nativespace-cdp sshd[4067223]: input_userauth_request: invalid user abhishek [preauth]
Sep 19 21:29:54 nativespace-cdp sshd[4067223]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:29:54 nativespace-cdp sshd[4067223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.31.70
Sep 19 21:29:55 nativespace-cdp sshd[4067223]: Failed password for invalid user abhishek from 41.93.31.70 port 59514 ssh2
Sep 19 21:29:55 nativespace-cdp sshd[4067223]: Received disconnect from 41.93.31.70 port 59514:11: Bye Bye [preauth]
Sep 19 21:29:55 nativespace-cdp sshd[4067223]: Disconnected from 41.93.31.70 port 59514 [preauth]
Sep 19 21:31:33 nativespace-cdp sshd[4067822]: Connection closed by 159.100.136.21 port 46312 [preauth]
Sep 19 21:34:19 nativespace-cdp sshd[4068493]: Invalid user support from 41.93.31.70 port 51968
Sep 19 21:34:19 nativespace-cdp sshd[4068493]: input_userauth_request: invalid user support [preauth]
Sep 19 21:34:19 nativespace-cdp sshd[4068493]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:34:19 nativespace-cdp sshd[4068493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.31.70
Sep 19 21:34:21 nativespace-cdp sshd[4068493]: Failed password for invalid user support from 41.93.31.70 port 51968 ssh2
Sep 19 21:34:23 nativespace-cdp sshd[4068493]: Received disconnect from 41.93.31.70 port 51968:11: Bye Bye [preauth]
Sep 19 21:34:23 nativespace-cdp sshd[4068493]: Disconnected from 41.93.31.70 port 51968 [preauth]
Sep 19 21:34:24 nativespace-cdp sshd[4068506]: Invalid user frappe from 190.221.132.118 port 34978
Sep 19 21:34:24 nativespace-cdp sshd[4068506]: input_userauth_request: invalid user frappe [preauth]
Sep 19 21:34:24 nativespace-cdp sshd[4068506]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:34:24 nativespace-cdp sshd[4068506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.221.132.118
Sep 19 21:34:26 nativespace-cdp sshd[4068506]: Failed password for invalid user frappe from 190.221.132.118 port 34978 ssh2
Sep 19 21:34:26 nativespace-cdp sshd[4068506]: Received disconnect from 190.221.132.118 port 34978:11: Bye Bye [preauth]
Sep 19 21:34:26 nativespace-cdp sshd[4068506]: Disconnected from 190.221.132.118 port 34978 [preauth]
Sep 19 21:35:14 nativespace-cdp sshd[4069151]: Invalid user sopuser from 41.93.31.70 port 36308
Sep 19 21:35:14 nativespace-cdp sshd[4069151]: input_userauth_request: invalid user sopuser [preauth]
Sep 19 21:35:14 nativespace-cdp sshd[4069151]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:35:14 nativespace-cdp sshd[4069151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.31.70
Sep 19 21:35:16 nativespace-cdp sshd[4069151]: Failed password for invalid user sopuser from 41.93.31.70 port 36308 ssh2
Sep 19 21:35:16 nativespace-cdp sshd[4069151]: Received disconnect from 41.93.31.70 port 36308:11: Bye Bye [preauth]
Sep 19 21:35:16 nativespace-cdp sshd[4069151]: Disconnected from 41.93.31.70 port 36308 [preauth]
Sep 19 21:36:33 nativespace-cdp sshd[4069519]: Connection closed by 159.100.136.21 port 55572 [preauth]
Sep 19 21:38:22 nativespace-cdp sshd[4069829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.221.132.118  user=root
Sep 19 21:38:22 nativespace-cdp sshd[4069829]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 21:38:24 nativespace-cdp sshd[4069829]: Failed password for root from 190.221.132.118 port 54520 ssh2
Sep 19 21:38:25 nativespace-cdp sshd[4069829]: Received disconnect from 190.221.132.118 port 54520:11: Bye Bye [preauth]
Sep 19 21:38:25 nativespace-cdp sshd[4069829]: Disconnected from 190.221.132.118 port 54520 [preauth]
Sep 19 21:39:19 nativespace-cdp sshd[4070024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.221.132.118  user=root
Sep 19 21:39:19 nativespace-cdp sshd[4070024]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 21:39:21 nativespace-cdp sshd[4070024]: Failed password for root from 190.221.132.118 port 42122 ssh2
Sep 19 21:41:33 nativespace-cdp sshd[4070757]: Connection closed by 159.100.136.21 port 36772 [preauth]
Sep 19 21:46:35 nativespace-cdp sshd[4071895]: Connection closed by 159.100.136.21 port 46350 [preauth]
Sep 19 21:49:16 nativespace-cdp sshd[4072830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.11.226  user=root
Sep 19 21:49:16 nativespace-cdp sshd[4072830]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 21:49:18 nativespace-cdp sshd[4072830]: Failed password for root from 64.225.11.226 port 48940 ssh2
Sep 19 21:49:19 nativespace-cdp sshd[4072830]: Received disconnect from 64.225.11.226 port 48940:11: Bye Bye [preauth]
Sep 19 21:49:19 nativespace-cdp sshd[4072830]: Disconnected from 64.225.11.226 port 48940 [preauth]
Sep 19 21:50:26 nativespace-cdp sshd[4073200]: Invalid user administrator from 79.117.7.241 port 35910
Sep 19 21:50:26 nativespace-cdp sshd[4073200]: input_userauth_request: invalid user administrator [preauth]
Sep 19 21:50:26 nativespace-cdp sshd[4073200]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:50:26 nativespace-cdp sshd[4073200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.117.7.241
Sep 19 21:50:28 nativespace-cdp sshd[4073200]: Failed password for invalid user administrator from 79.117.7.241 port 35910 ssh2
Sep 19 21:50:28 nativespace-cdp sshd[4073200]: Received disconnect from 79.117.7.241 port 35910:11: Bye Bye [preauth]
Sep 19 21:50:28 nativespace-cdp sshd[4073200]: Disconnected from 79.117.7.241 port 35910 [preauth]
Sep 19 21:51:34 nativespace-cdp sshd[4073557]: Connection closed by 159.100.136.21 port 55936 [preauth]
Sep 19 21:52:15 nativespace-cdp sshd[4073694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.126.244  user=root
Sep 19 21:52:15 nativespace-cdp sshd[4073694]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 21:52:18 nativespace-cdp sshd[4073694]: Failed password for root from 162.241.126.244 port 49332 ssh2
Sep 19 21:52:18 nativespace-cdp sshd[4073694]: Received disconnect from 162.241.126.244 port 49332:11: Bye Bye [preauth]
Sep 19 21:52:18 nativespace-cdp sshd[4073694]: Disconnected from 162.241.126.244 port 49332 [preauth]
Sep 19 21:55:28 nativespace-cdp sshd[4074479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.11.226  user=root
Sep 19 21:55:28 nativespace-cdp sshd[4074479]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 21:55:30 nativespace-cdp sshd[4074479]: Failed password for root from 64.225.11.226 port 48030 ssh2
Sep 19 21:55:30 nativespace-cdp sshd[4074479]: Received disconnect from 64.225.11.226 port 48030:11: Bye Bye [preauth]
Sep 19 21:55:30 nativespace-cdp sshd[4074479]: Disconnected from 64.225.11.226 port 48030 [preauth]
Sep 19 21:55:40 nativespace-cdp sshd[4074580]: Invalid user admin from 162.241.126.244 port 46254
Sep 19 21:55:40 nativespace-cdp sshd[4074580]: input_userauth_request: invalid user admin [preauth]
Sep 19 21:55:40 nativespace-cdp sshd[4074580]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:55:40 nativespace-cdp sshd[4074580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.126.244
Sep 19 21:55:42 nativespace-cdp sshd[4074580]: Failed password for invalid user admin from 162.241.126.244 port 46254 ssh2
Sep 19 21:55:42 nativespace-cdp sshd[4074580]: Received disconnect from 162.241.126.244 port 46254:11: Bye Bye [preauth]
Sep 19 21:55:42 nativespace-cdp sshd[4074580]: Disconnected from 162.241.126.244 port 46254 [preauth]
Sep 19 21:56:03 nativespace-cdp sshd[4074675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.11.226  user=david
Sep 19 21:56:05 nativespace-cdp sshd[4074675]: Failed password for david from 64.225.11.226 port 59578 ssh2
Sep 19 21:56:05 nativespace-cdp sshd[4074675]: Received disconnect from 64.225.11.226 port 59578:11: Bye Bye [preauth]
Sep 19 21:56:05 nativespace-cdp sshd[4074675]: Disconnected from 64.225.11.226 port 59578 [preauth]
Sep 19 21:56:22 nativespace-cdp sshd[4074762]: Invalid user administrator from 162.241.126.244 port 51102
Sep 19 21:56:22 nativespace-cdp sshd[4074762]: input_userauth_request: invalid user administrator [preauth]
Sep 19 21:56:22 nativespace-cdp sshd[4074762]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:56:22 nativespace-cdp sshd[4074762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.126.244
Sep 19 21:56:24 nativespace-cdp sshd[4074762]: Failed password for invalid user administrator from 162.241.126.244 port 51102 ssh2
Sep 19 21:56:24 nativespace-cdp sshd[4074762]: Received disconnect from 162.241.126.244 port 51102:11: Bye Bye [preauth]
Sep 19 21:56:24 nativespace-cdp sshd[4074762]: Disconnected from 162.241.126.244 port 51102 [preauth]
Sep 19 21:56:33 nativespace-cdp sshd[4074904]: Connection closed by 159.100.136.21 port 37404 [preauth]
Sep 19 21:57:34 nativespace-cdp sshd[4075208]: Invalid user admin from 79.117.7.241 port 41078
Sep 19 21:57:34 nativespace-cdp sshd[4075208]: input_userauth_request: invalid user admin [preauth]
Sep 19 21:57:34 nativespace-cdp sshd[4075208]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 21:57:34 nativespace-cdp sshd[4075208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.117.7.241
Sep 19 21:57:36 nativespace-cdp sshd[4075208]: Failed password for invalid user admin from 79.117.7.241 port 41078 ssh2
Sep 19 21:57:38 nativespace-cdp sshd[4075208]: Received disconnect from 79.117.7.241 port 41078:11: Bye Bye [preauth]
Sep 19 21:57:38 nativespace-cdp sshd[4075208]: Disconnected from 79.117.7.241 port 41078 [preauth]
Sep 19 21:58:17 nativespace-cdp sshd[4075430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.117.7.241  user=root
Sep 19 21:58:17 nativespace-cdp sshd[4075430]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 21:58:20 nativespace-cdp sshd[4075430]: Failed password for root from 79.117.7.241 port 53832 ssh2
Sep 19 21:58:20 nativespace-cdp sshd[4075430]: Received disconnect from 79.117.7.241 port 53832:11: Bye Bye [preauth]
Sep 19 21:58:20 nativespace-cdp sshd[4075430]: Disconnected from 79.117.7.241 port 53832 [preauth]
Sep 19 22:01:33 nativespace-cdp sshd[4076652]: Connection closed by 159.100.136.21 port 46924 [preauth]
Sep 19 22:06:33 nativespace-cdp sshd[4078353]: Connection closed by 159.100.136.21 port 55852 [preauth]
Sep 19 22:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 22:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:09 nativespace-cdp sudo[4079339]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 22:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:09 nativespace-cdp sudo[4079344]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 22:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:11 nativespace-cdp sudo[4079347]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:11 nativespace-cdp sudo[4079359]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 22:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:15 nativespace-cdp sudo[4079362]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 22:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:15 nativespace-cdp sudo[4079373]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 22:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:15 nativespace-cdp sudo[4079376]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 22:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:15 nativespace-cdp sudo[4079379]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 22:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:15 nativespace-cdp sudo[4079382]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 22:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:15 nativespace-cdp sudo[4079385]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 22:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:16 nativespace-cdp sudo[4079388]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 22:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:18 nativespace-cdp sudo[4079404]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 22:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:18 nativespace-cdp sudo[4079408]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=bwppodcast user-3=zebrapho user-4=sibtoncc user-5=asandcoc user-6=dhyana user-7=beauty user-8=darkstar user-9=eatspam user-10=nsceres user-11=fawcettd user-12=burydropin user-13=nomistakes user-14=hidden user-15=barbersh user-16=tigerlet user-17=smrszyqg user-18=isleofwi user-19=lkpier user-20=donnychicago user-21=firstre5 user-22=steakbridieme user-23=ctedorgu user-24=philmcph user-25=nscdp user-26=leftie user-27=foods user-28=fortunaz user-29=health2045 user-30=eugincou user-31=courseme user-32=hirefootballgame user-33=cwsocial user-34=howardon user-35=paulmca1 user-36=pugwash user-37=cathski user-38=cambria1 user-39=ninejimm user-40=reliable user-41=david user-42=nbhavers user-43=careers user-44=chrisdal user-45=mcdermos user-46=jennimil user-47=tomandle user-48=romaldki
Sep 19 22:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=outdoorc user-50=ranxterc user-51=hodgsonmail user-52=branko user-53=onlycont user-54=lucy user-55=attlebor user-56=bakery user-57=crrtipdl user-58=sosevalu user-59=boldover user-60=nove user-61=design user-62=stagingerris user-63=dancinggardener user-64=ladburyp user-65=kategilpin user-66=havantho user-67=cath user-68=sketchy user-69=nvihkvu user-70=tstardom user-71=oubpgvbx user-72=what user-73=ulsukarm user-74=vantagep user-75=connect9 user-76=athenare user-77=lbscrmod user-78=maflemin user-79=booff user-80=markward user-81=foundation user-82=stephani user-83=leereyn1 user-84=agproduc user-85=still user-86=spectrum user-87=hodgesonweb user-88=theblack user-89=jarvisin user-90=megacards user-91=musorguk user-92=wilsonsw user-93=strathar user-94=atestord user-95=sarafoundation user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=hhdugcor user-100=lbhyisi user-101=dickemery123 user-102=ptkxhsbt
Sep 19 22:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=firstred user-105=highlegh user-106=southlon user-107=firstrel user-108=clarkass user-109=costestimatorco user-110=coursemc user-111=opaiscyx user-112=ultbcrra user-113=seftvta user-114=jonhartl user-115=firstres user-116=connectedshoppin user-117=thqkgnbz user-118=accooper user-119=ianrayne user-120=hubmaster user-121=fetch user-122=carsinyo user-123=milloyco user-124=gilpin user-125=elecleis user-126=newstoda user-127=ggaaorgu user-128=belle user-129=bemadonn user-130=bedfords user-131=vivienn1 user-132=firstre2 user-133=oneoarco user-134=battlere user-135=nstriton user-136=brighto1 user-137=nativene user-138=innovat1 user-139=stuartge user-140=askhform user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 22:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 22:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:20 nativespace-cdp sudo[4079413]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:20 nativespace-cdp sudo[4079421]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HvKhUvAqCmmGfgK0.~
Sep 19 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:20 nativespace-cdp sudo[4079424]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HvKhUvAqCmmGfgK0.~'
Sep 19 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:20 nativespace-cdp sudo[4079427]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HvKhUvAqCmmGfgK0.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:20 nativespace-cdp sudo[4079431]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:20 nativespace-cdp sudo[4079434]: pam_unix(sudo:session): session closed for user root
Sep 19 22:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 22:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 22:10:31 nativespace-cdp sudo[4079486]: pam_unix(sudo:session): session closed for user root
Sep 19 22:11:33 nativespace-cdp sshd[4079789]: Connection closed by 159.100.136.21 port 36680 [preauth]
Sep 19 22:16:34 nativespace-cdp sshd[4081168]: Connection closed by 159.100.136.21 port 45708 [preauth]
Sep 19 22:21:36 nativespace-cdp sshd[4082787]: Connection closed by 159.100.136.21 port 54794 [preauth]
Sep 19 22:26:36 nativespace-cdp sshd[4083792]: Connection closed by 159.100.136.21 port 36588 [preauth]
Sep 19 22:31:33 nativespace-cdp sshd[4084900]: Connection closed by 159.100.136.21 port 46184 [preauth]
Sep 19 22:33:05 nativespace-cdp sshd[4085294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.90.125  user=root
Sep 19 22:33:05 nativespace-cdp sshd[4085294]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 19 22:33:07 nativespace-cdp sshd[4085294]: Failed password for root from 34.80.90.125 port 59214 ssh2
Sep 19 22:33:07 nativespace-cdp sshd[4085294]: Received disconnect from 34.80.90.125 port 59214:11: Bye Bye [preauth]
Sep 19 22:33:07 nativespace-cdp sshd[4085294]: Disconnected from 34.80.90.125 port 59214 [preauth]
Sep 19 22:36:33 nativespace-cdp sshd[4086016]: Connection closed by 159.100.136.21 port 55372 [preauth]
Sep 19 22:37:02 nativespace-cdp sshd[4086171]: Invalid user user from 34.80.90.125 port 52808
Sep 19 22:37:02 nativespace-cdp sshd[4086171]: input_userauth_request: invalid user user [preauth]
Sep 19 22:37:02 nativespace-cdp sshd[4086171]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 22:37:02 nativespace-cdp sshd[4086171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.90.125
Sep 19 22:37:03 nativespace-cdp sshd[4086171]: Failed password for invalid user user from 34.80.90.125 port 52808 ssh2
Sep 19 22:37:03 nativespace-cdp sshd[4086171]: Received disconnect from 34.80.90.125 port 52808:11: Bye Bye [preauth]
Sep 19 22:37:03 nativespace-cdp sshd[4086171]: Disconnected from 34.80.90.125 port 52808 [preauth]
Sep 19 22:37:52 nativespace-cdp sshd[4086299]: Invalid user debian from 34.80.90.125 port 42022
Sep 19 22:37:52 nativespace-cdp sshd[4086299]: input_userauth_request: invalid user debian [preauth]
Sep 19 22:37:52 nativespace-cdp sshd[4086299]: pam_unix(sshd:auth): check pass; user unknown
Sep 19 22:37:52 nativespace-cdp sshd[4086299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.90.125
Sep 19 22:37:54 nativespace-cdp sshd[4086299]: Failed password for invalid user debian from 34.80.90.125 port 42022 ssh2
Sep 19 22:41:33 nativespace-cdp sshd[4087180]: Connection closed by 159.100.136.21 port 36808 [preauth]
Sep 19 22:46:35 nativespace-cdp sshd[4088583]: Connection closed by 159.100.136.21 port 46054 [preauth]
Sep 19 22:51:33 nativespace-cdp sshd[4090839]: Connection closed by 159.100.136.21 port 55714 [preauth]
Sep 19 22:56:34 nativespace-cdp sshd[4092150]: Connection closed by 159.100.136.21 port 37608 [preauth]
Sep 19 23:01:33 nativespace-cdp sshd[4093268]: Connection closed by 159.100.136.21 port 46910 [preauth]
Sep 19 23:06:33 nativespace-cdp sshd[4094766]: Connection closed by 159.100.136.21 port 57048 [preauth]
Sep 19 23:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 19 23:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:08 nativespace-cdp sudo[4095584]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 19 23:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:08 nativespace-cdp sudo[4095588]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 19 23:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:08 nativespace-cdp sudo[4095591]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 19 23:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:09 nativespace-cdp sudo[4095596]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 19 23:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095600]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 19 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095664]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 19 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095669]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 19 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095673]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 19 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095678]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 19 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095685]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 19 23:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:14 nativespace-cdp sudo[4095690]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 19 23:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:16 nativespace-cdp sudo[4095702]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 19 23:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:17 nativespace-cdp sudo[4095708]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=alexadmin user-2=skyfirec user-3=nativene user-4=innovat1 user-5=askhform user-6=stuartge user-7=firstre2 user-8=vivienn1 user-9=battlere user-10=oneoarco user-11=brighto1 user-12=nstriton user-13=ggaaorgu user-14=belle user-15=newstoda user-16=bemadonn user-17=bedfords user-18=hubmaster user-19=carsinyo user-20=fetch user-21=gilpin user-22=milloyco user-23=elecleis user-24=connectedshoppin user-25=thqkgnbz user-26=accooper user-27=ianrayne user-28=coursemc user-29=opaiscyx user-30=seftvta user-31=jonhartl user-32=ultbcrra user-33=firstres user-34=firstred user-35=southlon user-36=highlegh user-37=clarkass user-38=firstrel user-39=costestimatorco user-40=dickemery123 user-41=ptkxhsbt user-42=martsblo user-43=magichat user-44=lbhyisi user-45=hhdugcor user-46=strathar user-47=sarafoundation
Sep 19 23:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=atestord user-49=lakesan1 user-50=brmrjxl user-51=musorguk user-52=megacards user-53=wilsonsw user-54=spectrum user-55=hodgesonweb user-56=theblack user-57=jarvisin user-58=stephani user-59=leereyn1 user-60=still user-61=agproduc user-62=athenare user-63=connect9 user-64=vantagep user-65=maflemin user-66=lbscrmod user-67=booff user-68=markward user-69=foundation user-70=ulsukarm user-71=sketchy user-72=cath user-73=havantho user-74=nvihkvu user-75=oubpgvbx user-76=tstardom user-77=what user-78=design user-79=ladburyp user-80=stagingerris user-81=dancinggardener user-82=kategilpin user-83=boldover user-84=nove user-85=bakery user-86=sosevalu user-87=crrtipdl user-88=onlycont user-89=attlebor user-90=lucy user-91=romaldki user-92=outdoorc user-93=ranxterc user-94=hodgsonmail user-95=branko user-96=jennimil user-97=tomandle user-98=careers user-99=nbhavers user-100=david user-101=chrisdal user-102=mcdermos
Sep 19 23:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=howardon user-104=pugwash user-105=paulmca1 user-106=cwsocial user-107=cambria1 user-108=cathski user-109=ninejimm user-110=reliable user-111=eugincou user-112=courseme user-113=hirefootballgame user-114=lkpier user-115=philmcph user-116=ctedorgu user-117=firstre5 user-118=steakbridieme user-119=donnychicago user-120=nscdp user-121=health2045 user-122=fortunaz user-123=foods user-124=leftie user-125=hidden user-126=nomistakes user-127=tigerlet user-128=barbersh user-129=isleofwi user-130=smrszyqg user-131=nsceres user-132=burydropin user-133=fawcettd user-134=dhyana user-135=beauty user-136=eatspam user-137=darkstar user-138=asandcoc user-139=sibtoncc user-140=steve user-141=bwppodcast user-142=zebrapho feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 19 23:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 19 23:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:18 nativespace-cdp sudo[4095715]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 23:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:18 nativespace-cdp sudo[4095723]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BLjS7EETx6FbBkTm.~
Sep 19 23:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:18 nativespace-cdp sudo[4095729]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BLjS7EETx6FbBkTm.~'
Sep 19 23:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:18 nativespace-cdp sudo[4095733]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BLjS7EETx6FbBkTm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 19 23:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:18 nativespace-cdp sudo[4095740]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 19 23:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:18 nativespace-cdp sudo[4095745]: pam_unix(sudo:session): session closed for user root
Sep 19 23:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 19 23:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 19 23:10:30 nativespace-cdp sudo[4095787]: pam_unix(sudo:session): session closed for user root
Sep 19 23:11:33 nativespace-cdp sshd[4095944]: Connection closed by 159.100.136.21 port 38204 [preauth]
Sep 19 23:16:33 nativespace-cdp sshd[4097254]: Connection closed by 159.100.136.21 port 47664 [preauth]
Sep 19 23:21:33 nativespace-cdp sshd[4098451]: Connection closed by 159.100.136.21 port 57138 [preauth]
Sep 19 23:26:36 nativespace-cdp sshd[4099653]: Connection closed by 159.100.136.21 port 38536 [preauth]
Sep 19 23:31:33 nativespace-cdp sshd[4100869]: Connection closed by 159.100.136.21 port 47664 [preauth]
Sep 19 23:36:34 nativespace-cdp sshd[4102388]: Connection closed by 159.100.136.21 port 56754 [preauth]
Sep 19 23:38:52 nativespace-cdp sshd[4102893]: Bad protocol version identification '\003' from 194.165.16.10 port 65532
Sep 19 23:41:33 nativespace-cdp sshd[4103539]: Connection closed by 159.100.136.21 port 37852 [preauth]
Sep 19 23:46:33 nativespace-cdp sshd[4104620]: Connection closed by 159.100.136.21 port 47374 [preauth]
Sep 19 23:51:33 nativespace-cdp sshd[4106059]: Connection closed by 159.100.136.21 port 56830 [preauth]
Sep 19 23:56:34 nativespace-cdp sshd[4106998]: Connection closed by 159.100.136.21 port 37894 [preauth]
Sep 20 00:01:33 nativespace-cdp sshd[4108144]: Connection closed by 159.100.136.21 port 46778 [preauth]
Sep 20 00:06:35 nativespace-cdp sshd[4109750]: Connection closed by 159.100.136.21 port 56878 [preauth]
Sep 20 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:00 nativespace-cdp sudo[4110523]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:00 nativespace-cdp sudo[4110527]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 00:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:01 nativespace-cdp sudo[4110532]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 00:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:01 nativespace-cdp sudo[4110540]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 00:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:06 nativespace-cdp sudo[4110546]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:06 nativespace-cdp sudo[4110698]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:07 nativespace-cdp sudo[4110701]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:07 nativespace-cdp sudo[4110704]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:07 nativespace-cdp sudo[4110707]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:07 nativespace-cdp sudo[4110710]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:07 nativespace-cdp sudo[4110713]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 00:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:12 nativespace-cdp sudo[4110731]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 00:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:12 nativespace-cdp sudo[4110736]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=vantagep user-3=athenare user-4=connect9 user-5=lbscrmod user-6=maflemin user-7=booff user-8=markward user-9=foundation user-10=stephani user-11=leereyn1 user-12=agproduc user-13=still user-14=spectrum user-15=hodgesonweb user-16=theblack user-17=jarvisin user-18=megacards user-19=musorguk user-20=wilsonsw user-21=strathar user-22=atestord user-23=sarafoundation user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=hhdugcor user-28=lbhyisi user-29=dickemery123 user-30=ptkxhsbt user-31=martsblo user-32=firstred user-33=highlegh user-34=southlon user-35=firstrel user-36=clarkass user-37=costestimatorco user-38=opaiscyx user-39=coursemc user-40=ultbcrra user-41=seftvta user-42=jonhartl user-43=firstres user-44=connectedshoppin user-45=thqkgnbz user-46=accooper user-47=ianrayne
Sep 20 00:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=hubmaster user-49=fetch user-50=carsinyo user-51=gilpin user-52=milloyco user-53=elecleis user-54=newstoda user-55=belle user-56=ggaaorgu user-57=bemadonn user-58=bedfords user-59=vivienn1 user-60=firstre2 user-61=oneoarco user-62=battlere user-63=nstriton user-64=brighto1 user-65=nativene user-66=innovat1 user-67=askhform user-68=stuartge user-69=skyfirec user-70=alexadmin user-71=steve user-72=bwppodcast user-73=zebrapho user-74=asandcoc user-75=sibtoncc user-76=dhyana user-77=beauty user-78=darkstar user-79=eatspam user-80=nsceres user-81=fawcettd user-82=burydropin user-83=nomistakes user-84=hidden user-85=tigerlet user-86=barbersh user-87=smrszyqg user-88=isleofwi user-89=lkpier user-90=firstre5 user-91=steakbridieme user-92=donnychicago user-93=ctedorgu user-94=philmcph user-95=nscdp user-96=foods user-97=leftie user-98=health2045 user-99=fortunaz user-100=eugincou user-101=courseme
Sep 20 00:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=cwsocial user-104=howardon user-105=paulmca1 user-106=pugwash user-107=cambria1 user-108=cathski user-109=reliable user-110=ninejimm user-111=david user-112=nbhavers user-113=careers user-114=chrisdal user-115=mcdermos user-116=jennimil user-117=tomandle user-118=romaldki user-119=ranxterc user-120=hodgsonmail user-121=outdoorc user-122=branko user-123=onlycont user-124=lucy user-125=attlebor user-126=bakery user-127=crrtipdl user-128=sosevalu user-129=boldover user-130=nove user-131=design user-132=dancinggardener user-133=stagingerris user-134=ladburyp user-135=kategilpin user-136=havantho user-137=cath user-138=sketchy user-139=nvihkvu user-140=oubpgvbx user-141=tstardom user-142=what feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 00:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 00:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:13 nativespace-cdp sudo[4110743]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 00:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:14 nativespace-cdp sudo[4110765]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tLkP67OIQ3mJsl70.~
Sep 20 00:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:14 nativespace-cdp sudo[4110772]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tLkP67OIQ3mJsl70.~'
Sep 20 00:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:14 nativespace-cdp sudo[4110776]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tLkP67OIQ3mJsl70.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 00:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:14 nativespace-cdp sudo[4110780]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 00:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:14 nativespace-cdp sudo[4110783]: pam_unix(sudo:session): session closed for user root
Sep 20 00:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 00:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 00:10:15 nativespace-cdp sudo[4110818]: pam_unix(sudo:session): session closed for user root
Sep 20 00:11:33 nativespace-cdp sshd[4111465]: Connection closed by 159.100.136.21 port 38160 [preauth]
Sep 20 00:16:35 nativespace-cdp sshd[4112708]: Connection closed by 159.100.136.21 port 47478 [preauth]
Sep 20 00:21:33 nativespace-cdp sshd[4114077]: Connection closed by 159.100.136.21 port 56538 [preauth]
Sep 20 00:26:34 nativespace-cdp sshd[4115870]: Connection closed by 159.100.136.21 port 37908 [preauth]
Sep 20 00:31:33 nativespace-cdp sshd[4116945]: Connection closed by 159.100.136.21 port 47468 [preauth]
Sep 20 00:36:33 nativespace-cdp sshd[4118310]: Connection closed by 159.100.136.21 port 56024 [preauth]
Sep 20 00:41:36 nativespace-cdp sshd[4119264]: Connection closed by 159.100.136.21 port 36464 [preauth]
Sep 20 00:46:35 nativespace-cdp sshd[4120238]: Connection closed by 159.100.136.21 port 46352 [preauth]
Sep 20 00:51:33 nativespace-cdp sshd[4121333]: Connection closed by 159.100.136.21 port 55788 [preauth]
Sep 20 00:56:35 nativespace-cdp sshd[4122664]: Connection closed by 159.100.136.21 port 37062 [preauth]
Sep 20 01:01:33 nativespace-cdp sshd[4123840]: Connection closed by 159.100.136.21 port 46664 [preauth]
Sep 20 01:06:33 nativespace-cdp sshd[4125252]: Connection closed by 159.100.136.21 port 55942 [preauth]
Sep 20 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:09 nativespace-cdp sudo[4126029]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:09 nativespace-cdp sudo[4126032]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 01:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:11 nativespace-cdp sudo[4126035]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 01:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:11 nativespace-cdp sudo[4126043]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 01:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:15 nativespace-cdp sudo[4126046]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:16 nativespace-cdp sudo[4126062]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:16 nativespace-cdp sudo[4126065]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:16 nativespace-cdp sudo[4126068]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:16 nativespace-cdp sudo[4126071]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:16 nativespace-cdp sudo[4126074]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 01:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:16 nativespace-cdp sudo[4126078]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 01:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:18 nativespace-cdp sudo[4126086]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 01:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:18 nativespace-cdp sudo[4126091]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=fawcettd user-2=burydropin user-3=nsceres user-4=darkstar user-5=eatspam user-6=beauty user-7=dhyana user-8=sibtoncc user-9=asandcoc user-10=zebrapho user-11=bwppodcast user-12=steve user-13=reliable user-14=ninejimm user-15=cambria1 user-16=cathski user-17=cwsocial user-18=howardon user-19=pugwash user-20=paulmca1 user-21=hirefootballgame user-22=courseme user-23=eugincou user-24=leftie user-25=foods user-26=fortunaz user-27=health2045 user-28=nscdp user-29=firstre5 user-30=steakbridieme user-31=donnychicago user-32=philmcph user-33=ctedorgu user-34=lkpier user-35=isleofwi user-36=smrszyqg user-37=tigerlet user-38=barbersh user-39=nomistakes user-40=hidden user-41=lucy user-42=attlebor user-43=onlycont user-44=branko user-45=outdoorc user-46=ranxterc user-47=hodgsonmail user-48=romaldki
Sep 20 01:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=mcdermos user-52=chrisdal user-53=david user-54=careers user-55=nbhavers user-56=what user-57=oubpgvbx user-58=tstardom user-59=nvihkvu user-60=havantho user-61=cath user-62=sketchy user-63=kategilpin user-64=stagingerris user-65=dancinggardener user-66=ladburyp user-67=design user-68=nove user-69=boldover user-70=crrtipdl user-71=sosevalu user-72=bakery user-73=jarvisin user-74=hodgesonweb user-75=theblack user-76=spectrum user-77=agproduc user-78=still user-79=leereyn1 user-80=stephani user-81=markward user-82=booff user-83=foundation user-84=lbscrmod user-85=maflemin user-86=vantagep user-87=athenare user-88=connect9 user-89=ulsukarm user-90=martsblo user-91=ptkxhsbt user-92=dickemery123 user-93=hhdugcor user-94=lbhyisi user-95=magichat user-96=lakesan1 user-97=brmrjxl user-98=atestord user-99=sarafoundation user-100=strathar user-101=wilsonsw user-102=megacards
Sep 20 01:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=musorguk user-104=elecleis user-105=milloyco user-106=gilpin user-107=fetch user-108=carsinyo user-109=hubmaster user-110=ianrayne user-111=accooper user-112=thqkgnbz user-113=connectedshoppin user-114=firstres user-115=ultbcrra user-116=jonhartl user-117=seftvta user-118=opaiscyx user-119=coursemc user-120=costestimatorco user-121=firstrel user-122=clarkass user-123=highlegh user-124=southlon user-125=firstred user-126=skyfirec user-127=alexadmin user-128=askhform user-129=stuartge user-130=innovat1 user-131=nativene user-132=nstriton user-133=brighto1 user-134=oneoarco user-135=battlere user-136=vivienn1 user-137=firstre2 user-138=bedfords user-139=bemadonn user-140=newstoda user-141=ggaaorgu user-142=belle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 01:10:19 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 01:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:20 nativespace-cdp sudo[4126097]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 01:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:20 nativespace-cdp sudo[4126103]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-l4tv60NY8Biqzekz.~
Sep 20 01:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:20 nativespace-cdp sudo[4126107]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-l4tv60NY8Biqzekz.~'
Sep 20 01:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:20 nativespace-cdp sudo[4126110]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-l4tv60NY8Biqzekz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 01:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:20 nativespace-cdp sudo[4126114]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 01:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:20 nativespace-cdp sudo[4126117]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 20 01:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:21 nativespace-cdp sudo[4126121]: pam_unix(sudo:session): session closed for user root
Sep 20 01:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 01:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 01:10:23 nativespace-cdp sudo[4126141]: pam_unix(sudo:session): session closed for user root
Sep 20 01:11:33 nativespace-cdp sshd[4126381]: Connection closed by 159.100.136.21 port 37198 [preauth]
Sep 20 01:16:33 nativespace-cdp sshd[4127443]: Connection closed by 159.100.136.21 port 46374 [preauth]
Sep 20 01:21:33 nativespace-cdp sshd[4128953]: Connection closed by 159.100.136.21 port 55558 [preauth]
Sep 20 01:26:36 nativespace-cdp sshd[4129968]: Connection closed by 159.100.136.21 port 36898 [preauth]
Sep 20 01:31:33 nativespace-cdp sshd[4130958]: Connection closed by 159.100.136.21 port 46396 [preauth]
Sep 20 01:36:33 nativespace-cdp sshd[4132227]: Connection closed by 159.100.136.21 port 56088 [preauth]
Sep 20 01:41:33 nativespace-cdp sshd[4133443]: Connection closed by 159.100.136.21 port 37074 [preauth]
Sep 20 01:46:33 nativespace-cdp sshd[4134495]: Connection closed by 159.100.136.21 port 45740 [preauth]
Sep 20 01:51:33 nativespace-cdp sshd[4136053]: Connection closed by 159.100.136.21 port 55198 [preauth]
Sep 20 01:56:33 nativespace-cdp sshd[4137204]: Connection closed by 159.100.136.21 port 36442 [preauth]
Sep 20 02:01:33 nativespace-cdp sshd[4138387]: Connection closed by 159.100.136.21 port 45240 [preauth]
Sep 20 02:06:35 nativespace-cdp sshd[4139837]: Connection closed by 159.100.136.21 port 54446 [preauth]
Sep 20 02:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 02:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:25 nativespace-cdp sudo[4140630]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 02:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:25 nativespace-cdp sudo[4140634]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 02:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:27 nativespace-cdp sudo[4140637]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 02:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:27 nativespace-cdp sudo[4140644]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 02:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140647]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 02:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140683]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 02:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140687]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 02:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140690]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 02:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140693]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 02:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140696]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 02:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:39 nativespace-cdp sudo[4140699]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 02:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:45 nativespace-cdp sudo[4140721]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 02:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:50 nativespace-cdp sudo[4140725]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=onlycont user-2=lucy user-3=attlebor user-4=romaldki user-5=outdoorc user-6=hodgsonmail user-7=ranxterc user-8=branko user-9=jennimil user-10=tomandle user-11=david user-12=careers user-13=nbhavers user-14=chrisdal user-15=mcdermos user-16=havantho user-17=sketchy user-18=cath user-19=nvihkvu user-20=tstardom user-21=oubpgvbx user-22=what user-23=design user-24=stagingerris user-25=dancinggardener user-26=ladburyp user-27=kategilpin user-28=boldover user-29=nove user-30=bakery user-31=crrtipdl user-32=sosevalu user-33=nsceres user-34=fawcettd user-35=burydropin user-36=dhyana user-37=beauty user-38=darkstar user-39=eatspam user-40=sibtoncc user-41=asandcoc user-42=steve user-43=bwppodcast user-44=zebrapho user-45=cwsocial user-46=pugwash user-47=howardon user-48=paulmca1 user-49=cambria1
Sep 20 02:10:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=cathski user-51=reliable user-52=ninejimm user-53=eugincou user-54=courseme user-55=hirefootballgame user-56=lkpier user-57=firstre5 user-58=steakbridieme user-59=donnychicago user-60=ctedorgu user-61=philmcph user-62=nscdp user-63=foods user-64=leftie user-65=health2045 user-66=fortunaz user-67=nomistakes user-68=hidden user-69=barbersh user-70=tigerlet user-71=smrszyqg user-72=isleofwi user-73=hubmaster user-74=fetch user-75=carsinyo user-76=milloyco user-77=gilpin user-78=elecleis user-79=connectedshoppin user-80=thqkgnbz user-81=accooper user-82=ianrayne user-83=coursemc user-84=opaiscyx user-85=ultbcrra user-86=seftvta user-87=jonhartl user-88=firstres user-89=firstred user-90=highlegh user-91=southlon user-92=clarkass user-93=firstrel user-94=costestimatorco user-95=alexadmin user-96=skyfirec user-97=nativene user-98=innovat1 user-99=stuartge user-100=askhform user-101=vivienn1 user-102=firstre2
Sep 20 02:10:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=oneoarco user-104=battlere user-105=nstriton user-106=brighto1 user-107=newstoda user-108=ggaaorgu user-109=belle user-110=bemadonn user-111=bedfords user-112=spectrum user-113=hodgesonweb user-114=theblack user-115=jarvisin user-116=stephani user-117=leereyn1 user-118=agproduc user-119=still user-120=vantagep user-121=connect9 user-122=athenare user-123=lbscrmod user-124=maflemin user-125=booff user-126=markward user-127=foundation user-128=ulsukarm user-129=dickemery123 user-130=ptkxhsbt user-131=martsblo user-132=magichat user-133=hhdugcor user-134=lbhyisi user-135=strathar user-136=atestord user-137=sarafoundation user-138=lakesan1 user-139=brmrjxl user-140=megacards user-141=musorguk user-142=wilsonsw feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 02:10:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 02:10:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:52 nativespace-cdp sudo[4140738]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 02:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:52 nativespace-cdp sudo[4140745]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EXJvPxdxwvqH1Vwi.~
Sep 20 02:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:53 nativespace-cdp sudo[4140749]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EXJvPxdxwvqH1Vwi.~'
Sep 20 02:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:53 nativespace-cdp sudo[4140753]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EXJvPxdxwvqH1Vwi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 02:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:53 nativespace-cdp sudo[4140757]: pam_unix(sudo:session): session closed for user root
Sep 20 02:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 02:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:10:53 nativespace-cdp sudo[4140760]: pam_unix(sudo:session): session closed for user root
Sep 20 02:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 02:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 02:11:00 nativespace-cdp sudo[4140835]: pam_unix(sudo:session): session closed for user root
Sep 20 02:11:33 nativespace-cdp sshd[4140967]: Connection closed by 159.100.136.21 port 35922 [preauth]
Sep 20 02:16:33 nativespace-cdp sshd[4142080]: Connection closed by 159.100.136.21 port 44974 [preauth]
Sep 20 02:21:34 nativespace-cdp sshd[4143372]: Connection closed by 159.100.136.21 port 53764 [preauth]
Sep 20 02:26:33 nativespace-cdp sshd[4144574]: Connection closed by 159.100.136.21 port 35206 [preauth]
Sep 20 02:31:34 nativespace-cdp sshd[4145616]: Connection closed by 159.100.136.21 port 44486 [preauth]
Sep 20 02:36:33 nativespace-cdp sshd[4146747]: Connection closed by 159.100.136.21 port 53278 [preauth]
Sep 20 02:41:35 nativespace-cdp sshd[4147928]: Connection closed by 159.100.136.21 port 34108 [preauth]
Sep 20 02:46:34 nativespace-cdp sshd[4149020]: Connection closed by 159.100.136.21 port 43590 [preauth]
Sep 20 02:51:33 nativespace-cdp sshd[4150512]: Connection closed by 159.100.136.21 port 52668 [preauth]
Sep 20 02:56:36 nativespace-cdp sshd[4151667]: Connection closed by 159.100.136.21 port 33490 [preauth]
Sep 20 03:01:33 nativespace-cdp sshd[4153377]: Connection closed by 159.100.136.21 port 42230 [preauth]
Sep 20 03:06:36 nativespace-cdp sshd[4154710]: Connection closed by 159.100.136.21 port 51470 [preauth]
Sep 20 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:24 nativespace-cdp sudo[4155742]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:24 nativespace-cdp sudo[4155746]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 03:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:26 nativespace-cdp sudo[4155749]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 03:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:26 nativespace-cdp sudo[4155756]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 03:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155759]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 03:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155787]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 03:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155792]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 03:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155795]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 03:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155798]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 03:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155801]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 03:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:36 nativespace-cdp sudo[4155804]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 03:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:43 nativespace-cdp sudo[4155826]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 03:10:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:48 nativespace-cdp sudo[4155833]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=foundation user-2=markward user-3=booff user-4=lbscrmod user-5=maflemin user-6=vantagep user-7=athenare user-8=connect9 user-9=ulsukarm user-10=jarvisin user-11=theblack user-12=hodgesonweb user-13=spectrum user-14=agproduc user-15=still user-16=leereyn1 user-17=stephani user-18=lakesan1 user-19=brmrjxl user-20=atestord user-21=sarafoundation user-22=strathar user-23=wilsonsw user-24=megacards user-25=musorguk user-26=martsblo user-27=ptkxhsbt user-28=dickemery123 user-29=hhdugcor user-30=lbhyisi user-31=magichat user-32=firstres user-33=ultbcrra user-34=jonhartl user-35=seftvta user-36=coursemc user-37=opaiscyx user-38=costestimatorco user-39=clarkass user-40=firstrel user-41=highlegh user-42=southlon user-43=firstred user-44=elecleis user-45=milloyco user-46=gilpin user-47=fetch
Sep 20 03:10:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=carsinyo user-49=hubmaster user-50=ianrayne user-51=accooper user-52=thqkgnbz user-53=connectedshoppin user-54=nstriton user-55=brighto1 user-56=oneoarco user-57=battlere user-58=vivienn1 user-59=firstre2 user-60=bedfords user-61=bemadonn user-62=newstoda user-63=belle user-64=ggaaorgu user-65=skyfirec user-66=alexadmin user-67=stuartge user-68=askhform user-69=innovat1 user-70=nativene user-71=sibtoncc user-72=asandcoc user-73=zebrapho user-74=bwppodcast user-75=steve user-76=fawcettd user-77=burydropin user-78=nsceres user-79=darkstar user-80=eatspam user-81=beauty user-82=dhyana user-83=foods user-84=leftie user-85=fortunaz user-86=health2045 user-87=nscdp user-88=firstre5 user-89=donnychicago user-90=steakbridieme user-91=ctedorgu user-92=philmcph user-93=lkpier user-94=smrszyqg user-95=isleofwi user-96=barbersh user-97=tigerlet user-98=nomistakes user-99=hidden user-100=reliable user-101=ninejimm
Sep 20 03:10:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cathski user-103=cambria1 user-104=cwsocial user-105=paulmca1 user-106=howardon user-107=pugwash user-108=hirefootballgame user-109=courseme user-110=eugincou user-111=tomandle user-112=jennimil user-113=mcdermos user-114=chrisdal user-115=david user-116=careers user-117=nbhavers user-118=lucy user-119=attlebor user-120=onlycont user-121=branko user-122=outdoorc user-123=ranxterc user-124=hodgsonmail user-125=romaldki user-126=nove user-127=boldover user-128=crrtipdl user-129=sosevalu user-130=bakery user-131=what user-132=oubpgvbx user-133=tstardom user-134=nvihkvu user-135=havantho user-136=sketchy user-137=cath user-138=kategilpin user-139=dancinggardener user-140=stagingerris user-141=ladburyp user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 03:10:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 03:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:51 nativespace-cdp sudo[4155846]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 03:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:52 nativespace-cdp sudo[4155908]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-W0Y44r4rMBwGMkCa.~
Sep 20 03:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:52 nativespace-cdp sudo[4155912]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-W0Y44r4rMBwGMkCa.~'
Sep 20 03:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:52 nativespace-cdp sudo[4155915]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-W0Y44r4rMBwGMkCa.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 03:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:52 nativespace-cdp sudo[4155919]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 03:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:52 nativespace-cdp sudo[4155922]: pam_unix(sudo:session): session closed for user root
Sep 20 03:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 03:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:10:55 nativespace-cdp sudo[4155943]: pam_unix(sudo:session): session closed for user root
Sep 20 03:11:34 nativespace-cdp sshd[4156067]: Connection closed by 159.100.136.21 port 60862 [preauth]
Sep 20 03:16:33 nativespace-cdp sshd[4157357]: Connection closed by 159.100.136.21 port 42178 [preauth]
Sep 20 03:21:35 nativespace-cdp sshd[4158817]: Connection closed by 159.100.136.21 port 51270 [preauth]
Sep 20 03:22:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 03:22:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 03:22:09 nativespace-cdp sudo[4158925]: pam_unix(sudo:session): session closed for user root
Sep 20 03:26:34 nativespace-cdp sshd[4159831]: Connection closed by 159.100.136.21 port 60514 [preauth]
Sep 20 03:27:08 nativespace-cdp sshd[4159922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.118.99.170  user=root
Sep 20 03:27:08 nativespace-cdp sshd[4159922]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:27:09 nativespace-cdp sshd[4159922]: Failed password for root from 200.118.99.170 port 47798 ssh2
Sep 20 03:27:10 nativespace-cdp sshd[4159922]: Received disconnect from 200.118.99.170 port 47798:11: Bye Bye [preauth]
Sep 20 03:27:10 nativespace-cdp sshd[4159922]: Disconnected from 200.118.99.170 port 47798 [preauth]
Sep 20 03:27:13 nativespace-cdp sshd[4159937]: Invalid user fleek from 103.168.56.140 port 60590
Sep 20 03:27:13 nativespace-cdp sshd[4159937]: input_userauth_request: invalid user fleek [preauth]
Sep 20 03:27:13 nativespace-cdp sshd[4159937]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:27:13 nativespace-cdp sshd[4159937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.168.56.140
Sep 20 03:27:15 nativespace-cdp sshd[4159937]: Failed password for invalid user fleek from 103.168.56.140 port 60590 ssh2
Sep 20 03:27:17 nativespace-cdp sshd[4159937]: Received disconnect from 103.168.56.140 port 60590:11: Bye Bye [preauth]
Sep 20 03:27:17 nativespace-cdp sshd[4159937]: Disconnected from 103.168.56.140 port 60590 [preauth]
Sep 20 03:28:37 nativespace-cdp sshd[4160169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.11.81  user=root
Sep 20 03:28:37 nativespace-cdp sshd[4160169]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:28:39 nativespace-cdp sshd[4160169]: Failed password for root from 34.80.11.81 port 45002 ssh2
Sep 20 03:28:40 nativespace-cdp sshd[4160169]: Received disconnect from 34.80.11.81 port 45002:11: Bye Bye [preauth]
Sep 20 03:28:40 nativespace-cdp sshd[4160169]: Disconnected from 34.80.11.81 port 45002 [preauth]
Sep 20 03:29:04 nativespace-cdp sshd[4160334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.111.52  user=root
Sep 20 03:29:04 nativespace-cdp sshd[4160334]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:29:04 nativespace-cdp sshd[4160336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.103.145  user=root
Sep 20 03:29:04 nativespace-cdp sshd[4160336]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:29:06 nativespace-cdp sshd[4160334]: Failed password for root from 213.32.111.52 port 43828 ssh2
Sep 20 03:29:06 nativespace-cdp sshd[4160334]: Received disconnect from 213.32.111.52 port 43828:11: Bye Bye [preauth]
Sep 20 03:29:06 nativespace-cdp sshd[4160334]: Disconnected from 213.32.111.52 port 43828 [preauth]
Sep 20 03:29:06 nativespace-cdp sshd[4160336]: Failed password for root from 37.187.103.145 port 41150 ssh2
Sep 20 03:29:06 nativespace-cdp sshd[4160336]: Received disconnect from 37.187.103.145 port 41150:11: Bye Bye [preauth]
Sep 20 03:29:06 nativespace-cdp sshd[4160336]: Disconnected from 37.187.103.145 port 41150 [preauth]
Sep 20 03:31:35 nativespace-cdp sshd[4160941]: Connection closed by 159.100.136.21 port 41696 [preauth]
Sep 20 03:32:13 nativespace-cdp sshd[4161059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.111.52  user=root
Sep 20 03:32:13 nativespace-cdp sshd[4161059]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:32:14 nativespace-cdp sshd[4161059]: Failed password for root from 213.32.111.52 port 53508 ssh2
Sep 20 03:32:14 nativespace-cdp sshd[4161059]: Received disconnect from 213.32.111.52 port 53508:11: Bye Bye [preauth]
Sep 20 03:32:14 nativespace-cdp sshd[4161059]: Disconnected from 213.32.111.52 port 53508 [preauth]
Sep 20 03:32:17 nativespace-cdp sshd[4161073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.103.145  user=root
Sep 20 03:32:17 nativespace-cdp sshd[4161073]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:32:17 nativespace-cdp sshd[4161071]: Invalid user ftpuser from 200.118.99.170 port 41808
Sep 20 03:32:17 nativespace-cdp sshd[4161071]: input_userauth_request: invalid user ftpuser [preauth]
Sep 20 03:32:17 nativespace-cdp sshd[4161071]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:32:17 nativespace-cdp sshd[4161071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.118.99.170
Sep 20 03:32:19 nativespace-cdp sshd[4161073]: Failed password for root from 37.187.103.145 port 56160 ssh2
Sep 20 03:32:19 nativespace-cdp sshd[4161071]: Failed password for invalid user ftpuser from 200.118.99.170 port 41808 ssh2
Sep 20 03:32:22 nativespace-cdp sshd[4161071]: Received disconnect from 200.118.99.170 port 41808:11: Bye Bye [preauth]
Sep 20 03:32:22 nativespace-cdp sshd[4161071]: Disconnected from 200.118.99.170 port 41808 [preauth]
Sep 20 03:32:22 nativespace-cdp sshd[4161073]: Received disconnect from 37.187.103.145 port 56160:11: Bye Bye [preauth]
Sep 20 03:32:22 nativespace-cdp sshd[4161073]: Disconnected from 37.187.103.145 port 56160 [preauth]
Sep 20 03:32:23 nativespace-cdp sshd[4161080]: Connection closed by 34.80.11.81 port 43768 [preauth]
Sep 20 03:32:23 nativespace-cdp sshd[4161087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.168.56.140  user=root
Sep 20 03:32:23 nativespace-cdp sshd[4161087]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:32:25 nativespace-cdp sshd[4161087]: Failed password for root from 103.168.56.140 port 58362 ssh2
Sep 20 03:32:25 nativespace-cdp sshd[4161087]: Received disconnect from 103.168.56.140 port 58362:11: Bye Bye [preauth]
Sep 20 03:32:25 nativespace-cdp sshd[4161087]: Disconnected from 103.168.56.140 port 58362 [preauth]
Sep 20 03:32:54 nativespace-cdp sshd[4161265]: Invalid user ubuntu from 213.32.111.52 port 57148
Sep 20 03:32:54 nativespace-cdp sshd[4161265]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 03:32:54 nativespace-cdp sshd[4161265]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:32:54 nativespace-cdp sshd[4161265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.111.52
Sep 20 03:32:56 nativespace-cdp sshd[4161265]: Failed password for invalid user ubuntu from 213.32.111.52 port 57148 ssh2
Sep 20 03:32:56 nativespace-cdp sshd[4161265]: Received disconnect from 213.32.111.52 port 57148:11: Bye Bye [preauth]
Sep 20 03:32:56 nativespace-cdp sshd[4161265]: Disconnected from 213.32.111.52 port 57148 [preauth]
Sep 20 03:32:58 nativespace-cdp sshd[4161294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.103.145  user=root
Sep 20 03:32:58 nativespace-cdp sshd[4161294]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 03:33:00 nativespace-cdp sshd[4161294]: Failed password for root from 37.187.103.145 port 45858 ssh2
Sep 20 03:33:00 nativespace-cdp sshd[4161294]: Received disconnect from 37.187.103.145 port 45858:11: Bye Bye [preauth]
Sep 20 03:33:00 nativespace-cdp sshd[4161294]: Disconnected from 37.187.103.145 port 45858 [preauth]
Sep 20 03:33:16 nativespace-cdp sshd[4161386]: Invalid user newuser from 34.80.11.81 port 55708
Sep 20 03:33:16 nativespace-cdp sshd[4161386]: input_userauth_request: invalid user newuser [preauth]
Sep 20 03:33:16 nativespace-cdp sshd[4161386]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:33:16 nativespace-cdp sshd[4161386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.11.81
Sep 20 03:33:16 nativespace-cdp sshd[4161397]: Invalid user newuser from 103.168.56.140 port 55678
Sep 20 03:33:16 nativespace-cdp sshd[4161397]: input_userauth_request: invalid user newuser [preauth]
Sep 20 03:33:16 nativespace-cdp sshd[4161397]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:33:16 nativespace-cdp sshd[4161397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.168.56.140
Sep 20 03:33:17 nativespace-cdp sshd[4161386]: Failed password for invalid user newuser from 34.80.11.81 port 55708 ssh2
Sep 20 03:33:17 nativespace-cdp sshd[4161397]: Failed password for invalid user newuser from 103.168.56.140 port 55678 ssh2
Sep 20 03:33:18 nativespace-cdp sshd[4161397]: Received disconnect from 103.168.56.140 port 55678:11: Bye Bye [preauth]
Sep 20 03:33:18 nativespace-cdp sshd[4161397]: Disconnected from 103.168.56.140 port 55678 [preauth]
Sep 20 03:33:18 nativespace-cdp sshd[4161386]: Received disconnect from 34.80.11.81 port 55708:11: Bye Bye [preauth]
Sep 20 03:33:18 nativespace-cdp sshd[4161386]: Disconnected from 34.80.11.81 port 55708 [preauth]
Sep 20 03:33:48 nativespace-cdp sshd[4161504]: Invalid user drcomadmin from 200.118.99.170 port 40136
Sep 20 03:33:48 nativespace-cdp sshd[4161504]: input_userauth_request: invalid user drcomadmin [preauth]
Sep 20 03:33:48 nativespace-cdp sshd[4161504]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:33:48 nativespace-cdp sshd[4161504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.118.99.170
Sep 20 03:33:51 nativespace-cdp sshd[4161504]: Failed password for invalid user drcomadmin from 200.118.99.170 port 40136 ssh2
Sep 20 03:33:51 nativespace-cdp sshd[4161504]: Received disconnect from 200.118.99.170 port 40136:11: Bye Bye [preauth]
Sep 20 03:33:51 nativespace-cdp sshd[4161504]: Disconnected from 200.118.99.170 port 40136 [preauth]
Sep 20 03:34:11 nativespace-cdp sshd[4161674]: Invalid user ftpuser1 from 34.80.11.81 port 40178
Sep 20 03:34:11 nativespace-cdp sshd[4161674]: input_userauth_request: invalid user ftpuser1 [preauth]
Sep 20 03:34:11 nativespace-cdp sshd[4161674]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 03:34:11 nativespace-cdp sshd[4161674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.11.81
Sep 20 03:34:14 nativespace-cdp sshd[4161674]: Failed password for invalid user ftpuser1 from 34.80.11.81 port 40178 ssh2
Sep 20 03:34:14 nativespace-cdp sshd[4161674]: Received disconnect from 34.80.11.81 port 40178:11: Bye Bye [preauth]
Sep 20 03:34:14 nativespace-cdp sshd[4161674]: Disconnected from 34.80.11.81 port 40178 [preauth]
Sep 20 03:36:35 nativespace-cdp sshd[4162564]: Connection closed by 159.100.136.21 port 51214 [preauth]
Sep 20 03:41:33 nativespace-cdp sshd[4163786]: Connection closed by 159.100.136.21 port 60190 [preauth]
Sep 20 03:46:34 nativespace-cdp sshd[4164936]: Connection closed by 159.100.136.21 port 41238 [preauth]
Sep 20 03:51:35 nativespace-cdp sshd[4166417]: Connection closed by 159.100.136.21 port 50344 [preauth]
Sep 20 03:56:33 nativespace-cdp sshd[4167469]: Connection closed by 159.100.136.21 port 59682 [preauth]
Sep 20 04:01:33 nativespace-cdp sshd[4168636]: Connection closed by 159.100.136.21 port 40572 [preauth]
Sep 20 04:06:35 nativespace-cdp sshd[4169789]: Connection closed by 159.100.136.21 port 48642 [preauth]
Sep 20 04:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 04:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:26 nativespace-cdp sudo[4174047]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 04:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:26 nativespace-cdp sudo[4174054]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 04:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:29 nativespace-cdp sudo[4174060]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 04:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:29 nativespace-cdp sudo[4174083]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 04:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:33 nativespace-cdp sudo[4174086]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 04:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:34 nativespace-cdp sudo[4174098]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 04:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:34 nativespace-cdp sudo[4174101]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 04:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:34 nativespace-cdp sudo[4174104]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 04:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:34 nativespace-cdp sudo[4174107]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 04:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:34 nativespace-cdp sudo[4174110]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 04:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:34 nativespace-cdp sudo[4174113]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 04:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:37 nativespace-cdp sudo[4174123]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 04:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:42 nativespace-cdp sudo[4174133]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=what user-2=oubpgvbx user-3=tstardom user-4=nvihkvu user-5=havantho user-6=sketchy user-7=cath user-8=kategilpin user-9=dancinggardener user-10=stagingerris user-11=ladburyp user-12=design user-13=nove user-14=boldover user-15=crrtipdl user-16=sosevalu user-17=bakery user-18=lucy user-19=attlebor user-20=onlycont user-21=branko user-22=outdoorc user-23=ranxterc user-24=hodgsonmail user-25=romaldki user-26=tomandle user-27=jennimil user-28=mcdermos user-29=chrisdal user-30=david user-31=careers user-32=nbhavers user-33=ninejimm user-34=reliable user-35=cathski user-36=cambria1 user-37=cwsocial user-38=paulmca1 user-39=howardon user-40=pugwash user-41=hirefootballgame user-42=courseme user-43=eugincou user-44=foods user-45=leftie user-46=fortunaz user-47=health2045 user-48=nscdp
Sep 20 04:10:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=donnychicago user-50=firstre5 user-51=steakbridieme user-52=ctedorgu user-53=philmcph user-54=lkpier user-55=isleofwi user-56=smrszyqg user-57=barbersh user-58=tigerlet user-59=nomistakes user-60=hidden user-61=fawcettd user-62=burydropin user-63=nsceres user-64=darkstar user-65=eatspam user-66=beauty user-67=dhyana user-68=sibtoncc user-69=asandcoc user-70=zebrapho user-71=bwppodcast user-72=steve user-73=skyfirec user-74=alexadmin user-75=stuartge user-76=askhform user-77=innovat1 user-78=nativene user-79=nstriton user-80=brighto1 user-81=oneoarco user-82=battlere user-83=vivienn1 user-84=firstre2 user-85=bedfords user-86=bemadonn user-87=newstoda user-88=ggaaorgu user-89=belle user-90=elecleis user-91=milloyco user-92=gilpin user-93=fetch user-94=carsinyo user-95=hubmaster user-96=ianrayne user-97=accooper user-98=thqkgnbz user-99=connectedshoppin user-100=firstres user-101=ultbcrra user-102=jonhartl
Sep 20 04:10:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=seftvta user-104=opaiscyx user-105=coursemc user-106=costestimatorco user-107=firstrel user-108=clarkass user-109=highlegh user-110=southlon user-111=firstred user-112=martsblo user-113=ptkxhsbt user-114=dickemery123 user-115=hhdugcor user-116=lbhyisi user-117=magichat user-118=brmrjxl user-119=lakesan1 user-120=atestord user-121=sarafoundation user-122=strathar user-123=wilsonsw user-124=megacards user-125=musorguk user-126=jarvisin user-127=hodgesonweb user-128=theblack user-129=spectrum user-130=agproduc user-131=still user-132=leereyn1 user-133=stephani user-134=markward user-135=foundation user-136=booff user-137=lbscrmod user-138=maflemin user-139=vantagep user-140=athenare user-141=connect9 user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 04:10:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 04:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:43 nativespace-cdp sudo[4174150]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 04:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:44 nativespace-cdp sudo[4174158]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xsX49y33tafvy9NA.~
Sep 20 04:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:45 nativespace-cdp sudo[4174161]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xsX49y33tafvy9NA.~'
Sep 20 04:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:45 nativespace-cdp sudo[4174164]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-xsX49y33tafvy9NA.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 04:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:45 nativespace-cdp sudo[4174168]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 04:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:45 nativespace-cdp sudo[4174172]: pam_unix(sudo:session): session closed for user root
Sep 20 04:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 04:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:10:54 nativespace-cdp sudo[4174203]: pam_unix(sudo:session): session closed for user root
Sep 20 04:11:33 nativespace-cdp sshd[4174322]: Connection closed by 159.100.136.21 port 57060 [preauth]
Sep 20 04:16:34 nativespace-cdp sshd[4175608]: Connection closed by 159.100.136.21 port 38340 [preauth]
Sep 20 04:21:35 nativespace-cdp sshd[4177194]: Connection closed by 159.100.136.21 port 46464 [preauth]
Sep 20 04:26:33 nativespace-cdp sshd[4178190]: Connection closed by 159.100.136.21 port 55148 [preauth]
Sep 20 04:31:34 nativespace-cdp sshd[4179323]: Connection closed by 159.100.136.21 port 36186 [preauth]
Sep 20 04:36:34 nativespace-cdp sshd[4180985]: Connection closed by 159.100.136.21 port 45134 [preauth]
Sep 20 04:41:34 nativespace-cdp sshd[4183369]: Connection closed by 159.100.136.21 port 53650 [preauth]
Sep 20 04:46:34 nativespace-cdp sshd[4184881]: Connection closed by 159.100.136.21 port 34862 [preauth]
Sep 20 04:51:33 nativespace-cdp sshd[4186157]: Connection closed by 159.100.136.21 port 43884 [preauth]
Sep 20 04:56:33 nativespace-cdp sshd[4187754]: Connection closed by 159.100.136.21 port 53296 [preauth]
Sep 20 04:57:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 04:57:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:07 nativespace-cdp sudo[4187860]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 04:57:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:07 nativespace-cdp sudo[4187877]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 04:57:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:13 nativespace-cdp sudo[4187902]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=agproduc user-2=still user-3=stephani user-4=leereyn1 user-5=jarvisin user-6=spectrum user-7=hodgesonweb user-8=theblack user-9=ulsukarm user-10=foundation user-11=markward user-12=booff user-13=vantagep user-14=athenare user-15=connect9 user-16=lbscrmod user-17=maflemin user-18=hhdugcor user-19=lbhyisi user-20=magichat user-21=martsblo user-22=dickemery123 user-23=ptkxhsbt user-24=wilsonsw user-25=megacards user-26=musorguk user-27=lakesan1 user-28=brmrjxl user-29=strathar user-30=atestord user-31=sarafoundation user-32=accooper user-33=ianrayne user-34=connectedshoppin user-35=thqkgnbz user-36=milloyco user-37=gilpin user-38=elecleis user-39=hubmaster user-40=fetch user-41=carsinyo user-42=firstrel user-43=clarkass user-44=costestimatorco user-45=firstred user-46=highlegh user-47=southlon
Sep 20 04:57:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ultbcrra user-49=seftvta user-50=jonhartl user-51=firstres user-52=opaiscyx user-53=coursemc user-54=innovat1 user-55=askhform user-56=stuartge user-57=nativene user-58=alexadmin user-59=skyfirec user-60=bedfords user-61=newstoda user-62=ggaaorgu user-63=belle user-64=bemadonn user-65=nstriton user-66=brighto1 user-67=vivienn1 user-68=firstre2 user-69=oneoarco user-70=battlere user-71=beauty user-72=darkstar user-73=eatspam user-74=dhyana user-75=fawcettd user-76=burydropin user-77=nsceres user-78=bwppodcast user-79=zebrapho user-80=steve user-81=sibtoncc user-82=asandcoc user-83=hirefootballgame user-84=eugincou user-85=courseme user-86=cambria1 user-87=cathski user-88=ninejimm user-89=reliable user-90=cwsocial user-91=howardon user-92=paulmca1 user-93=pugwash user-94=isleofwi user-95=smrszyqg user-96=nomistakes user-97=hidden user-98=barbersh user-99=tigerlet user-100=nscdp user-101=foods
Sep 20 04:57:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=leftie user-103=fortunaz user-104=health2045 user-105=lkpier user-106=firstre5 user-107=steakbridieme user-108=donnychicago user-109=ctedorgu user-110=philmcph user-111=hodgsonmail user-112=ranxterc user-113=outdoorc user-114=branko user-115=romaldki user-116=lucy user-117=attlebor user-118=onlycont user-119=chrisdal user-120=mcdermos user-121=david user-122=nbhavers user-123=careers user-124=tomandle user-125=jennimil user-126=stagingerris user-127=dancinggardener user-128=ladburyp user-129=kategilpin user-130=design user-131=tstardom user-132=oubpgvbx user-133=what user-134=havantho user-135=sketchy user-136=cath user-137=nvihkvu user-138=bakery user-139=crrtipdl user-140=sosevalu user-141=nove user-142=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 04:57:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 04:57:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:15 nativespace-cdp sudo[4187911]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 20 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:16 nativespace-cdp sudo[4187919]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 20 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:17 nativespace-cdp sudo[4187926]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 20 04:57:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:57:57 nativespace-cdp sudo[4188121]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 20 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:57:58 nativespace-cdp sudo[4188128]: pam_unix(sudo:session): session closed for user root
Sep 20 04:57:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 20 04:57:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:00 nativespace-cdp sudo[4188134]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 20 04:58:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:04 nativespace-cdp sudo[4188141]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 20 04:58:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:04 nativespace-cdp sudo[4188171]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 20 04:58:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:07 nativespace-cdp sudo[4188187]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 20 04:58:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:13 nativespace-cdp sudo[4188198]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 20 04:58:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:14 nativespace-cdp sudo[4188214]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 20 04:58:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:14 nativespace-cdp sudo[4188218]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 20 04:58:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:18 nativespace-cdp sudo[4188285]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 04:58:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:22 nativespace-cdp sudo[4188344]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 20 04:58:22 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 20 04:58:22 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 20 04:58:22 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 04:58:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:23 nativespace-cdp sudo[4188350]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 20 04:58:23 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 20 04:58:23 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 20 04:58:23 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 04:58:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:24 nativespace-cdp sudo[4188358]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 20 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 20 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 20 04:58:24 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 04:58:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:26 nativespace-cdp sudo[4188366]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 04:58:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:37 nativespace-cdp sudo[4188487]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 04:58:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:37 nativespace-cdp sudo[4188493]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 04:58:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:37 nativespace-cdp sudo[4188499]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 20 04:58:37 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 04:58:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 04:58:37 nativespace-cdp sudo[4188505]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 04:58:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 20 04:58:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:40 nativespace-cdp sudo[4188546]: pam_unix(sudo:session): session closed for user root
Sep 20 04:58:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 20 04:58:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 04:58:43 nativespace-cdp sudo[4188552]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 20 05:00:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:00:10 nativespace-cdp sudo[4189023]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:00:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 20 05:00:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:11 nativespace-cdp sudo[4189032]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 20 05:00:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:16 nativespace-cdp sudo[4189037]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 20 05:00:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:29 nativespace-cdp sudo[4189053]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 20 05:00:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:30 nativespace-cdp sudo[4189149]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 20 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:43 nativespace-cdp sudo[4189191]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 20 05:00:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:44 nativespace-cdp sudo[4189199]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 20 05:00:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:00:55 nativespace-cdp sudo[4189294]: pam_unix(sudo:session): session closed for user root
Sep 20 05:00:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 05:00:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:00:59 nativespace-cdp sudo[4189354]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:00:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 20 05:00:59 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 20 05:00:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 20 05:00:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:00:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:01:00 nativespace-cdp sudo[4189361]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:01:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 20 05:01:00 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 20 05:01:00 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 20 05:01:00 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:01:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:01:29 nativespace-cdp sudo[4189369]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:01:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 05:01:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:01:40 nativespace-cdp sudo[4189598]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:01:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:01:40 nativespace-cdp sudo[4189604]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 20 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:01:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:01:40 nativespace-cdp sudo[4189610]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 20 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:01:45 nativespace-cdp sudo[4189648]: pam_unix(sudo:session): session closed for user root
Sep 20 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 20 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:01:46 nativespace-cdp sudo[4189661]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 20 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:02:26 nativespace-cdp sudo[4189838]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 20 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:02:28 nativespace-cdp sudo[4189845]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 20 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:02:29 nativespace-cdp sudo[4189854]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 20 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:02:29 nativespace-cdp sudo[4189861]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 20 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:02:32 nativespace-cdp sudo[4189874]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 20 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:02:32 nativespace-cdp sudo[4189892]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 20 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:02:40 nativespace-cdp sudo[4190038]: pam_unix(sudo:session): session closed for user root
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:02:43 nativespace-cdp sudo[4190125]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:02:43 nativespace-cdp sudo[4190133]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 20 05:02:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:02:56 nativespace-cdp sudo[4190140]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 20 05:02:56 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 20 05:02:56 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 20 05:02:56 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:02:58 nativespace-cdp sudo[4190297]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:03:05 nativespace-cdp sudo[4190476]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:03:05 nativespace-cdp sudo[4190483]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 20 05:03:05 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:03:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:03:05 nativespace-cdp sudo[4190490]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:03:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 20 05:03:06 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 20 05:03:06 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 20 05:03:06 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:03:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 05:03:06 nativespace-cdp sudo[4190496]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 20 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:09 nativespace-cdp sudo[4190541]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 20 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:11 nativespace-cdp sudo[4190584]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 20 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:13 nativespace-cdp sudo[4190666]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 20 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:13 nativespace-cdp sudo[4190672]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 20 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 20 05:03:13 nativespace-cdp sudo[4190685]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 20 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 20 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:14 nativespace-cdp sudo[4190692]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 20 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:15 nativespace-cdp sudo[4190696]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 20 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:15 nativespace-cdp sudo[4190701]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 20 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:03:52 nativespace-cdp sudo[4190848]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 20 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:53 nativespace-cdp sudo[4190854]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 20 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:53 nativespace-cdp sudo[4190919]: pam_unix(sudo:session): session closed for user root
Sep 20 05:03:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 20 05:03:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:03:55 nativespace-cdp sudo[4190932]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 20 05:04:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:03 nativespace-cdp sudo[4191020]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:04:06 nativespace-cdp sudo[4191079]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 20 05:04:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 20 05:04:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 20 05:04:06 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:04:07 nativespace-cdp sudo[4191085]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 20 05:04:07 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 20 05:04:07 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 20 05:04:07 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:04:22 nativespace-cdp sudo[4191092]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 20 05:04:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:04:30 nativespace-cdp sudo[4191231]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:04:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:04:30 nativespace-cdp sudo[4191236]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 20 05:04:30 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 20 05:04:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 05:04:30 nativespace-cdp sudo[4191242]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 20 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:33 nativespace-cdp sudo[4191320]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 20 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:33 nativespace-cdp sudo[4191341]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 20 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 20 05:04:48 nativespace-cdp sudo[4191443]: pam_unix(sudo:session): session closed for user fortunaz
Sep 20 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 20 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:49 nativespace-cdp sudo[4191451]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 20 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:49 nativespace-cdp sudo[4191457]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 20 05:04:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:49 nativespace-cdp sudo[4191462]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 20 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:52 nativespace-cdp sudo[4191477]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 20 05:04:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:52 nativespace-cdp sudo[4191482]: pam_unix(sudo:session): session closed for user root
Sep 20 05:04:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 20 05:04:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:04:59 nativespace-cdp sudo[4191553]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=agproduc WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more" on Fortuna Zingara (https://fortunazingara.com). Installed version: 3.11.0. Available version: 3.11.1.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core
Sep 20 05:05:13 nativespace-cdp sudo: wp-toolkit : (command continued) download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 20 05:05:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:14 nativespace-cdp sudo[4191845]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 20 05:05:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:50 nativespace-cdp sudo[4192040]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192044]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192048]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192051]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192054]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192057]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192060]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192063]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192066]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192069]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192073]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192076]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:51 nativespace-cdp sudo[4192079]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192083]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192086]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192089]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192092]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192095]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192098]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192102]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192105]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192108]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192111]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192114]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192117]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192120]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192123]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192126]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192130]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192133]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192137]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:52 nativespace-cdp sudo[4192140]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192143]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192146]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192149]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192153]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192156]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192159]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192162]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192165]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192168]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192171]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192174]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192177]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192181]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192184]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192188]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192191]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192196]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192199]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192202]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192205]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192209]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192212]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192215]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192218]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192221]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192224]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:53 nativespace-cdp sudo[4192227]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192230]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192233]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192236]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192239]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192242]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192245]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192249]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192252]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192255]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192258]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192262]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192265]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192268]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192271]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192274]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192277]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192280]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192283]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192286]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192289]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192292]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192295]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192298]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192301]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192304]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:54 nativespace-cdp sudo[4192307]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192310]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192313]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192316]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192319]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192322]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192325]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192328]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192331]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192334]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192337]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192340]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192344]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192347]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192350]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192353]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192356]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192359]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192362]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192365]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192368]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192371]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192374]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192377]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192380]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:55 nativespace-cdp sudo[4192383]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192386]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192389]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192392]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192395]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192398]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192401]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192405]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192408]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192411]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192414]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192417]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192420]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192423]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192426]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192429]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192432]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192436]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192439]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192442]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192445]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192448]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192451]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192454]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192457]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192462]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192465]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192468]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192472]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192475]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192478]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192481]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192484]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192487]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192490]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192493]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:56 nativespace-cdp sudo[4192496]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192499]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192502]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192505]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192508]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192511]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192514]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192517]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192520]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192523]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192526]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192529]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192532]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192535]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192538]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192542]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192545]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192549]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192552]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192555]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192558]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192561]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192564]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192567]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192570]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192573]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192576]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192579]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192582]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192585]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192588]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:57 nativespace-cdp sudo[4192591]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192594]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192597]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192600]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192603]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192606]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192609]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192612]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192615]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192618]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192621]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192624]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192627]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192630]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192633]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192637]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192640]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192643]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192646]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192649]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192652]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192656]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192661]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192664]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192667]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192670]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192674]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192677]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192680]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192683]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192686]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192690]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192693]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192696]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 20 05:05:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:58 nativespace-cdp sudo[4192699]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192702]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192705]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192708]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192711]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192714]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192717]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192720]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192723]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192726]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192729]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192732]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192735]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192738]: pam_unix(sudo:session): session closed for user root
Sep 20 05:05:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 20 05:05:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:05:59 nativespace-cdp sudo[4192742]: pam_unix(sudo:session): session closed for user root
Sep 20 05:06:33 nativespace-cdp sshd[4192864]: Connection closed by 159.100.136.21 port 43206 [preauth]
Sep 20 05:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 05:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:15 nativespace-cdp sudo[4193702]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 05:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:15 nativespace-cdp sudo[4193705]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 05:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:18 nativespace-cdp sudo[4193708]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 05:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:18 nativespace-cdp sudo[4193719]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 05:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:24 nativespace-cdp sudo[4193723]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 05:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:24 nativespace-cdp sudo[4193793]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 05:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:25 nativespace-cdp sudo[4193797]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 05:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:25 nativespace-cdp sudo[4193800]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 05:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:25 nativespace-cdp sudo[4193803]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 05:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:25 nativespace-cdp sudo[4193806]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 05:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:25 nativespace-cdp sudo[4193809]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 05:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:33 nativespace-cdp sudo[4193839]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 05:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:36 nativespace-cdp sudo[4193849]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=what user-2=tstardom user-3=oubpgvbx user-4=nvihkvu user-5=havantho user-6=cath user-7=sketchy user-8=kategilpin user-9=dancinggardener user-10=stagingerris user-11=ladburyp user-12=design user-13=nove user-14=boldover user-15=crrtipdl user-16=sosevalu user-17=bakery user-18=lucy user-19=attlebor user-20=onlycont user-21=branko user-22=hodgsonmail user-23=outdoorc user-24=ranxterc user-25=romaldki user-26=tomandle user-27=jennimil user-28=mcdermos user-29=chrisdal user-30=david user-31=careers user-32=nbhavers user-33=ninejimm user-34=reliable user-35=cambria1 user-36=cathski user-37=cwsocial user-38=howardon user-39=paulmca1 user-40=pugwash user-41=hirefootballgame user-42=courseme user-43=eugincou user-44=foods user-45=leftie user-46=fortunaz user-47=health2045 user-48=nscdp user-49=firstre5
Sep 20 05:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=donnychicago user-51=steakbridieme user-52=ctedorgu user-53=philmcph user-54=lkpier user-55=isleofwi user-56=smrszyqg user-57=barbersh user-58=tigerlet user-59=nomistakes user-60=hidden user-61=fawcettd user-62=burydropin user-63=nsceres user-64=darkstar user-65=eatspam user-66=beauty user-67=dhyana user-68=asandcoc user-69=sibtoncc user-70=zebrapho user-71=bwppodcast user-72=steve user-73=skyfirec user-74=alexadmin user-75=stuartge user-76=askhform user-77=innovat1 user-78=nativene user-79=nstriton user-80=brighto1 user-81=oneoarco user-82=battlere user-83=vivienn1 user-84=firstre2 user-85=bedfords user-86=bemadonn user-87=newstoda user-88=belle user-89=ggaaorgu user-90=elecleis user-91=gilpin user-92=milloyco user-93=fetch user-94=carsinyo user-95=hubmaster user-96=ianrayne user-97=accooper user-98=thqkgnbz user-99=connectedshoppin user-100=firstres user-101=ultbcrra user-102=seftvta user-103=jonhartl
Sep 20 05:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=opaiscyx user-105=coursemc user-106=costestimatorco user-107=firstrel user-108=clarkass user-109=highlegh user-110=southlon user-111=firstred user-112=martsblo user-113=ptkxhsbt user-114=dickemery123 user-115=hhdugcor user-116=lbhyisi user-117=magichat user-118=brmrjxl user-119=lakesan1 user-120=atestord user-121=sarafoundation user-122=strathar user-123=wilsonsw user-124=megacards user-125=musorguk user-126=jarvisin user-127=theblack user-128=hodgesonweb user-129=spectrum user-130=agproduc user-131=still user-132=leereyn1 user-133=stephani user-134=booff user-135=markward user-136=foundation user-137=lbscrmod user-138=maflemin user-139=vantagep user-140=connect9 user-141=athenare user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 05:10:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 05:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:39 nativespace-cdp sudo[4193876]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 05:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:40 nativespace-cdp sudo[4193889]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9QvR8fChG30yDLbu.~
Sep 20 05:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:40 nativespace-cdp sudo[4193893]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9QvR8fChG30yDLbu.~'
Sep 20 05:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:40 nativespace-cdp sudo[4193896]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9QvR8fChG30yDLbu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 05:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:40 nativespace-cdp sudo[4193900]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 05:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:41 nativespace-cdp sudo[4193904]: pam_unix(sudo:session): session closed for user root
Sep 20 05:10:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 05:10:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 05:10:43 nativespace-cdp sudo[4193918]: pam_unix(sudo:session): session closed for user root
Sep 20 05:11:35 nativespace-cdp sshd[4194083]: Connection closed by 159.100.136.21 port 51920 [preauth]
Sep 20 05:13:11 nativespace-cdp sshd[362]: Invalid user test from 138.121.1.70 port 55080
Sep 20 05:13:11 nativespace-cdp sshd[362]: input_userauth_request: invalid user test [preauth]
Sep 20 05:13:11 nativespace-cdp sshd[362]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:13:11 nativespace-cdp sshd[362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.1.70
Sep 20 05:13:13 nativespace-cdp sshd[362]: Failed password for invalid user test from 138.121.1.70 port 55080 ssh2
Sep 20 05:13:13 nativespace-cdp sshd[362]: Received disconnect from 138.121.1.70 port 55080:11: Bye Bye [preauth]
Sep 20 05:13:13 nativespace-cdp sshd[362]: Disconnected from 138.121.1.70 port 55080 [preauth]
Sep 20 05:13:40 nativespace-cdp sshd[444]: Invalid user ubuntu from 104.199.188.0 port 60520
Sep 20 05:13:40 nativespace-cdp sshd[444]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:13:40 nativespace-cdp sshd[444]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:13:40 nativespace-cdp sshd[444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.199.188.0
Sep 20 05:13:43 nativespace-cdp sshd[444]: Failed password for invalid user ubuntu from 104.199.188.0 port 60520 ssh2
Sep 20 05:13:43 nativespace-cdp sshd[444]: Received disconnect from 104.199.188.0 port 60520:11: Bye Bye [preauth]
Sep 20 05:13:43 nativespace-cdp sshd[444]: Disconnected from 104.199.188.0 port 60520 [preauth]
Sep 20 05:13:59 nativespace-cdp sshd[482]: Invalid user support from 161.35.122.26 port 55056
Sep 20 05:13:59 nativespace-cdp sshd[482]: input_userauth_request: invalid user support [preauth]
Sep 20 05:13:59 nativespace-cdp sshd[482]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:13:59 nativespace-cdp sshd[482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.122.26
Sep 20 05:14:01 nativespace-cdp sshd[482]: Failed password for invalid user support from 161.35.122.26 port 55056 ssh2
Sep 20 05:14:01 nativespace-cdp sshd[482]: Received disconnect from 161.35.122.26 port 55056:11: Bye Bye [preauth]
Sep 20 05:14:01 nativespace-cdp sshd[482]: Disconnected from 161.35.122.26 port 55056 [preauth]
Sep 20 05:14:05 nativespace-cdp sshd[515]: Invalid user bitwarden from 103.181.143.24 port 58108
Sep 20 05:14:05 nativespace-cdp sshd[515]: input_userauth_request: invalid user bitwarden [preauth]
Sep 20 05:14:05 nativespace-cdp sshd[515]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:14:05 nativespace-cdp sshd[515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.24
Sep 20 05:14:06 nativespace-cdp sshd[515]: Failed password for invalid user bitwarden from 103.181.143.24 port 58108 ssh2
Sep 20 05:14:12 nativespace-cdp sshd[515]: Received disconnect from 103.181.143.24 port 58108:11: Bye Bye [preauth]
Sep 20 05:14:12 nativespace-cdp sshd[515]: Disconnected from 103.181.143.24 port 58108 [preauth]
Sep 20 05:14:41 nativespace-cdp sshd[700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.73.231.122  user=root
Sep 20 05:14:41 nativespace-cdp sshd[700]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 05:14:43 nativespace-cdp sshd[700]: Failed password for root from 65.73.231.122 port 42522 ssh2
Sep 20 05:14:43 nativespace-cdp sshd[700]: Received disconnect from 65.73.231.122 port 42522:11: Bye Bye [preauth]
Sep 20 05:14:43 nativespace-cdp sshd[700]: Disconnected from 65.73.231.122 port 42522 [preauth]
Sep 20 05:15:05 nativespace-cdp sshd[885]: Invalid user odoo from 185.239.86.3 port 53286
Sep 20 05:15:05 nativespace-cdp sshd[885]: input_userauth_request: invalid user odoo [preauth]
Sep 20 05:15:06 nativespace-cdp sshd[885]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:15:06 nativespace-cdp sshd[885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.86.3
Sep 20 05:15:08 nativespace-cdp sshd[885]: Failed password for invalid user odoo from 185.239.86.3 port 53286 ssh2
Sep 20 05:15:09 nativespace-cdp sshd[885]: Received disconnect from 185.239.86.3 port 53286:11: Bye Bye [preauth]
Sep 20 05:15:09 nativespace-cdp sshd[885]: Disconnected from 185.239.86.3 port 53286 [preauth]
Sep 20 05:15:10 nativespace-cdp sshd[914]: Invalid user ubuntu from 152.89.239.172 port 33648
Sep 20 05:15:10 nativespace-cdp sshd[914]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:15:10 nativespace-cdp sshd[914]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:15:10 nativespace-cdp sshd[914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.239.172
Sep 20 05:15:12 nativespace-cdp sshd[914]: Failed password for invalid user ubuntu from 152.89.239.172 port 33648 ssh2
Sep 20 05:15:12 nativespace-cdp sshd[914]: Received disconnect from 152.89.239.172 port 33648:11: Bye Bye [preauth]
Sep 20 05:15:12 nativespace-cdp sshd[914]: Disconnected from 152.89.239.172 port 33648 [preauth]
Sep 20 05:15:21 nativespace-cdp sshd[975]: Invalid user testuser from 34.81.173.225 port 40340
Sep 20 05:15:21 nativespace-cdp sshd[975]: input_userauth_request: invalid user testuser [preauth]
Sep 20 05:15:21 nativespace-cdp sshd[975]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:15:21 nativespace-cdp sshd[975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.81.173.225
Sep 20 05:15:23 nativespace-cdp sshd[975]: Failed password for invalid user testuser from 34.81.173.225 port 40340 ssh2
Sep 20 05:15:25 nativespace-cdp sshd[975]: Received disconnect from 34.81.173.225 port 40340:11: Bye Bye [preauth]
Sep 20 05:15:25 nativespace-cdp sshd[975]: Disconnected from 34.81.173.225 port 40340 [preauth]
Sep 20 05:16:24 nativespace-cdp sshd[1187]: Invalid user nexus from 202.184.134.245 port 33904
Sep 20 05:16:24 nativespace-cdp sshd[1187]: input_userauth_request: invalid user nexus [preauth]
Sep 20 05:16:24 nativespace-cdp sshd[1187]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:16:24 nativespace-cdp sshd[1187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.184.134.245
Sep 20 05:16:26 nativespace-cdp sshd[1187]: Failed password for invalid user nexus from 202.184.134.245 port 33904 ssh2
Sep 20 05:16:27 nativespace-cdp sshd[1187]: Received disconnect from 202.184.134.245 port 33904:11: Bye Bye [preauth]
Sep 20 05:16:27 nativespace-cdp sshd[1187]: Disconnected from 202.184.134.245 port 33904 [preauth]
Sep 20 05:16:34 nativespace-cdp sshd[1208]: Connection closed by 159.100.136.21 port 33202 [preauth]
Sep 20 05:16:56 nativespace-cdp sshd[1265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.122.26  user=root
Sep 20 05:16:56 nativespace-cdp sshd[1265]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 05:16:58 nativespace-cdp sshd[1265]: Failed password for root from 161.35.122.26 port 60478 ssh2
Sep 20 05:16:58 nativespace-cdp sshd[1265]: Received disconnect from 161.35.122.26 port 60478:11: Bye Bye [preauth]
Sep 20 05:16:58 nativespace-cdp sshd[1265]: Disconnected from 161.35.122.26 port 60478 [preauth]
Sep 20 05:17:16 nativespace-cdp sshd[1326]: Invalid user steam from 65.73.231.122 port 44290
Sep 20 05:17:16 nativespace-cdp sshd[1326]: input_userauth_request: invalid user steam [preauth]
Sep 20 05:17:16 nativespace-cdp sshd[1326]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:17:16 nativespace-cdp sshd[1326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.73.231.122
Sep 20 05:17:18 nativespace-cdp sshd[1326]: Failed password for invalid user steam from 65.73.231.122 port 44290 ssh2
Sep 20 05:17:18 nativespace-cdp sshd[1326]: Received disconnect from 65.73.231.122 port 44290:11: Bye Bye [preauth]
Sep 20 05:17:18 nativespace-cdp sshd[1326]: Disconnected from 65.73.231.122 port 44290 [preauth]
Sep 20 05:17:24 nativespace-cdp sshd[1343]: Invalid user username from 138.121.1.70 port 39650
Sep 20 05:17:24 nativespace-cdp sshd[1343]: input_userauth_request: invalid user username [preauth]
Sep 20 05:17:24 nativespace-cdp sshd[1343]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:17:24 nativespace-cdp sshd[1343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.1.70
Sep 20 05:17:25 nativespace-cdp sshd[1346]: Invalid user sysadmin from 104.199.188.0 port 35962
Sep 20 05:17:25 nativespace-cdp sshd[1346]: input_userauth_request: invalid user sysadmin [preauth]
Sep 20 05:17:25 nativespace-cdp sshd[1346]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:17:25 nativespace-cdp sshd[1346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.199.188.0
Sep 20 05:17:26 nativespace-cdp sshd[1343]: Failed password for invalid user username from 138.121.1.70 port 39650 ssh2
Sep 20 05:17:26 nativespace-cdp sshd[1343]: Received disconnect from 138.121.1.70 port 39650:11: Bye Bye [preauth]
Sep 20 05:17:26 nativespace-cdp sshd[1343]: Disconnected from 138.121.1.70 port 39650 [preauth]
Sep 20 05:17:27 nativespace-cdp sshd[1346]: Failed password for invalid user sysadmin from 104.199.188.0 port 35962 ssh2
Sep 20 05:17:27 nativespace-cdp sshd[1346]: Received disconnect from 104.199.188.0 port 35962:11: Bye Bye [preauth]
Sep 20 05:17:27 nativespace-cdp sshd[1346]: Disconnected from 104.199.188.0 port 35962 [preauth]
Sep 20 05:17:31 nativespace-cdp sshd[1379]: Invalid user support from 152.89.239.172 port 35658
Sep 20 05:17:31 nativespace-cdp sshd[1379]: input_userauth_request: invalid user support [preauth]
Sep 20 05:17:31 nativespace-cdp sshd[1379]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:17:31 nativespace-cdp sshd[1379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.239.172
Sep 20 05:17:34 nativespace-cdp sshd[1379]: Failed password for invalid user support from 152.89.239.172 port 35658 ssh2
Sep 20 05:17:35 nativespace-cdp sshd[1379]: Received disconnect from 152.89.239.172 port 35658:11: Bye Bye [preauth]
Sep 20 05:17:35 nativespace-cdp sshd[1379]: Disconnected from 152.89.239.172 port 35658 [preauth]
Sep 20 05:17:39 nativespace-cdp sshd[1415]: Invalid user ubuntu from 161.35.122.26 port 46810
Sep 20 05:17:39 nativespace-cdp sshd[1415]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:17:39 nativespace-cdp sshd[1415]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:17:39 nativespace-cdp sshd[1415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.122.26
Sep 20 05:17:39 nativespace-cdp sshd[1409]: Connection closed by 34.81.173.225 port 58560 [preauth]
Sep 20 05:17:41 nativespace-cdp sshd[1415]: Failed password for invalid user ubuntu from 161.35.122.26 port 46810 ssh2
Sep 20 05:17:42 nativespace-cdp sshd[1415]: Received disconnect from 161.35.122.26 port 46810:11: Bye Bye [preauth]
Sep 20 05:17:42 nativespace-cdp sshd[1415]: Disconnected from 161.35.122.26 port 46810 [preauth]
Sep 20 05:17:42 nativespace-cdp sshd[1422]: Invalid user test1 from 202.184.134.245 port 47332
Sep 20 05:17:42 nativespace-cdp sshd[1422]: input_userauth_request: invalid user test1 [preauth]
Sep 20 05:17:42 nativespace-cdp sshd[1422]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:17:42 nativespace-cdp sshd[1422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.184.134.245
Sep 20 05:17:44 nativespace-cdp sshd[1422]: Failed password for invalid user test1 from 202.184.134.245 port 47332 ssh2
Sep 20 05:17:47 nativespace-cdp sshd[1422]: Received disconnect from 202.184.134.245 port 47332:11: Bye Bye [preauth]
Sep 20 05:17:47 nativespace-cdp sshd[1422]: Disconnected from 202.184.134.245 port 47332 [preauth]
Sep 20 05:18:16 nativespace-cdp sshd[1692]: Invalid user svn from 138.121.1.70 port 52366
Sep 20 05:18:16 nativespace-cdp sshd[1692]: input_userauth_request: invalid user svn [preauth]
Sep 20 05:18:16 nativespace-cdp sshd[1692]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:16 nativespace-cdp sshd[1692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.1.70
Sep 20 05:18:17 nativespace-cdp sshd[1700]: Invalid user ubuntu from 104.199.188.0 port 43440
Sep 20 05:18:17 nativespace-cdp sshd[1700]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:18:17 nativespace-cdp sshd[1700]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:17 nativespace-cdp sshd[1700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.199.188.0
Sep 20 05:18:18 nativespace-cdp sshd[1692]: Failed password for invalid user svn from 138.121.1.70 port 52366 ssh2
Sep 20 05:18:19 nativespace-cdp sshd[1692]: Received disconnect from 138.121.1.70 port 52366:11: Bye Bye [preauth]
Sep 20 05:18:19 nativespace-cdp sshd[1692]: Disconnected from 138.121.1.70 port 52366 [preauth]
Sep 20 05:18:19 nativespace-cdp sshd[1707]: Invalid user ubuntu from 152.89.239.172 port 47552
Sep 20 05:18:19 nativespace-cdp sshd[1707]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:18:19 nativespace-cdp sshd[1707]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:19 nativespace-cdp sshd[1707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.89.239.172
Sep 20 05:18:20 nativespace-cdp sshd[1700]: Failed password for invalid user ubuntu from 104.199.188.0 port 43440 ssh2
Sep 20 05:18:20 nativespace-cdp sshd[1700]: Received disconnect from 104.199.188.0 port 43440:11: Bye Bye [preauth]
Sep 20 05:18:20 nativespace-cdp sshd[1700]: Disconnected from 104.199.188.0 port 43440 [preauth]
Sep 20 05:18:21 nativespace-cdp sshd[1707]: Failed password for invalid user ubuntu from 152.89.239.172 port 47552 ssh2
Sep 20 05:18:28 nativespace-cdp sshd[1789]: Received disconnect from 34.81.173.225 port 57322:11: Bye Bye [preauth]
Sep 20 05:18:28 nativespace-cdp sshd[1789]: Disconnected from 34.81.173.225 port 57322 [preauth]
Sep 20 05:18:30 nativespace-cdp sshd[1809]: Invalid user username from 202.184.134.245 port 51276
Sep 20 05:18:30 nativespace-cdp sshd[1809]: input_userauth_request: invalid user username [preauth]
Sep 20 05:18:30 nativespace-cdp sshd[1809]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:30 nativespace-cdp sshd[1809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.184.134.245
Sep 20 05:18:32 nativespace-cdp sshd[1809]: Failed password for invalid user username from 202.184.134.245 port 51276 ssh2
Sep 20 05:18:33 nativespace-cdp sshd[1809]: Received disconnect from 202.184.134.245 port 51276:11: Bye Bye [preauth]
Sep 20 05:18:33 nativespace-cdp sshd[1809]: Disconnected from 202.184.134.245 port 51276 [preauth]
Sep 20 05:18:33 nativespace-cdp sshd[1820]: Invalid user username from 65.73.231.122 port 42158
Sep 20 05:18:33 nativespace-cdp sshd[1820]: input_userauth_request: invalid user username [preauth]
Sep 20 05:18:33 nativespace-cdp sshd[1820]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:33 nativespace-cdp sshd[1820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.73.231.122
Sep 20 05:18:34 nativespace-cdp sshd[1820]: Failed password for invalid user username from 65.73.231.122 port 42158 ssh2
Sep 20 05:18:35 nativespace-cdp sshd[1820]: Received disconnect from 65.73.231.122 port 42158:11: Bye Bye [preauth]
Sep 20 05:18:35 nativespace-cdp sshd[1820]: Disconnected from 65.73.231.122 port 42158 [preauth]
Sep 20 05:18:40 nativespace-cdp sshd[1892]: Invalid user testuser from 185.239.86.3 port 51558
Sep 20 05:18:40 nativespace-cdp sshd[1892]: input_userauth_request: invalid user testuser [preauth]
Sep 20 05:18:40 nativespace-cdp sshd[1892]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:40 nativespace-cdp sshd[1892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.86.3
Sep 20 05:18:40 nativespace-cdp sshd[1866]: Connection closed by 103.181.143.24 port 40332 [preauth]
Sep 20 05:18:41 nativespace-cdp sshd[1892]: Failed password for invalid user testuser from 185.239.86.3 port 51558 ssh2
Sep 20 05:18:42 nativespace-cdp sshd[1892]: Received disconnect from 185.239.86.3 port 51558:11: Bye Bye [preauth]
Sep 20 05:18:42 nativespace-cdp sshd[1892]: Disconnected from 185.239.86.3 port 51558 [preauth]
Sep 20 05:18:45 nativespace-cdp sshd[1907]: Invalid user ubuntu from 185.239.86.3 port 52998
Sep 20 05:18:45 nativespace-cdp sshd[1907]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:18:45 nativespace-cdp sshd[1907]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:18:45 nativespace-cdp sshd[1907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.86.3
Sep 20 05:18:46 nativespace-cdp sshd[1907]: Failed password for invalid user ubuntu from 185.239.86.3 port 52998 ssh2
Sep 20 05:18:49 nativespace-cdp sshd[1907]: Received disconnect from 185.239.86.3 port 52998:11: Bye Bye [preauth]
Sep 20 05:18:49 nativespace-cdp sshd[1907]: Disconnected from 185.239.86.3 port 52998 [preauth]
Sep 20 05:19:14 nativespace-cdp sshd[2013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.81.173.225  user=root
Sep 20 05:19:14 nativespace-cdp sshd[2013]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 05:19:16 nativespace-cdp sshd[2013]: Failed password for root from 34.81.173.225 port 43636 ssh2
Sep 20 05:19:17 nativespace-cdp sshd[2013]: Received disconnect from 34.81.173.225 port 43636:11: Bye Bye [preauth]
Sep 20 05:19:17 nativespace-cdp sshd[2013]: Disconnected from 34.81.173.225 port 43636 [preauth]
Sep 20 05:19:59 nativespace-cdp sshd[2257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.81.173.225  user=root
Sep 20 05:19:59 nativespace-cdp sshd[2257]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 05:20:01 nativespace-cdp sshd[2257]: Failed password for root from 34.81.173.225 port 55060 ssh2
Sep 20 05:20:03 nativespace-cdp sshd[2257]: Received disconnect from 34.81.173.225 port 55060:11: Bye Bye [preauth]
Sep 20 05:20:03 nativespace-cdp sshd[2257]: Disconnected from 34.81.173.225 port 55060 [preauth]
Sep 20 05:21:19 nativespace-cdp sshd[2966]: Invalid user ubuntu from 103.181.143.24 port 49704
Sep 20 05:21:19 nativespace-cdp sshd[2966]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 05:21:19 nativespace-cdp sshd[2966]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:21:19 nativespace-cdp sshd[2966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.24
Sep 20 05:21:22 nativespace-cdp sshd[2966]: Failed password for invalid user ubuntu from 103.181.143.24 port 49704 ssh2
Sep 20 05:21:22 nativespace-cdp sshd[2966]: Received disconnect from 103.181.143.24 port 49704:11: Bye Bye [preauth]
Sep 20 05:21:22 nativespace-cdp sshd[2966]: Disconnected from 103.181.143.24 port 49704 [preauth]
Sep 20 05:21:34 nativespace-cdp sshd[3006]: Connection closed by 159.100.136.21 port 42634 [preauth]
Sep 20 05:22:09 nativespace-cdp sshd[3108]: Invalid user test from 103.181.143.24 port 34056
Sep 20 05:22:09 nativespace-cdp sshd[3108]: input_userauth_request: invalid user test [preauth]
Sep 20 05:22:09 nativespace-cdp sshd[3108]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 05:22:09 nativespace-cdp sshd[3108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.24
Sep 20 05:22:10 nativespace-cdp sshd[3108]: Failed password for invalid user test from 103.181.143.24 port 34056 ssh2
Sep 20 05:22:10 nativespace-cdp sshd[3108]: Received disconnect from 103.181.143.24 port 34056:11: Bye Bye [preauth]
Sep 20 05:22:10 nativespace-cdp sshd[3108]: Disconnected from 103.181.143.24 port 34056 [preauth]
Sep 20 05:26:33 nativespace-cdp sshd[4180]: Connection closed by 159.100.136.21 port 51458 [preauth]
Sep 20 05:31:36 nativespace-cdp sshd[5525]: Connection closed by 159.100.136.21 port 59920 [preauth]
Sep 20 05:35:25 nativespace-cdp su: pam_unix(su:session): session opened for user pugwash by (uid=0)
Sep 20 05:35:27 nativespace-cdp su[6811]: pam_unix(su:session): session closed for user pugwash
Sep 20 05:36:34 nativespace-cdp sshd[7085]: Connection closed by 159.100.136.21 port 40726 [preauth]
Sep 20 05:41:37 nativespace-cdp sshd[8170]: Connection closed by 159.100.136.21 port 48936 [preauth]
Sep 20 05:46:35 nativespace-cdp sshd[9207]: Connection closed by 159.100.136.21 port 58454 [preauth]
Sep 20 05:51:33 nativespace-cdp sshd[10616]: Connection closed by 159.100.136.21 port 39338 [preauth]
Sep 20 05:56:33 nativespace-cdp sshd[11591]: Connection closed by 159.100.136.21 port 48916 [preauth]
Sep 20 06:01:34 nativespace-cdp sshd[12748]: Connection closed by 159.100.136.21 port 58072 [preauth]
Sep 20 06:06:35 nativespace-cdp sshd[14084]: Connection closed by 159.100.136.21 port 39200 [preauth]
Sep 20 06:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 06:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:24 nativespace-cdp sudo[14936]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 06:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:24 nativespace-cdp sudo[14940]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 06:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:26 nativespace-cdp sudo[14943]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 06:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:26 nativespace-cdp sudo[14953]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 06:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:32 nativespace-cdp sudo[14956]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:33 nativespace-cdp sudo[14974]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:33 nativespace-cdp sudo[14977]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:33 nativespace-cdp sudo[14980]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:33 nativespace-cdp sudo[14983]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:33 nativespace-cdp sudo[14986]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 06:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:33 nativespace-cdp sudo[14989]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 06:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:47 nativespace-cdp sudo[15046]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 06:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:51 nativespace-cdp sudo[15053]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bwppodcast user-2=zebrapho user-3=steve user-4=sibtoncc user-5=asandcoc user-6=beauty user-7=eatspam user-8=darkstar user-9=dhyana user-10=burydropin user-11=fawcettd user-12=nsceres user-13=isleofwi user-14=smrszyqg user-15=hidden user-16=nomistakes user-17=barbersh user-18=tigerlet user-19=nscdp user-20=fortunaz user-21=health2045 user-22=foods user-23=leftie user-24=lkpier user-25=ctedorgu user-26=philmcph user-27=steakbridieme user-28=firstre5 user-29=donnychicago user-30=hirefootballgame user-31=eugincou user-32=courseme user-33=cambria1 user-34=cathski user-35=reliable user-36=ninejimm user-37=paulmca1 user-38=howardon user-39=pugwash user-40=cwsocial user-41=chrisdal user-42=mcdermos user-43=careers user-44=nbhavers user-45=david user-46=tomandle user-47=jennimil user-48=hodgsonmail
Sep 20 06:10:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=outdoorc user-50=ranxterc user-51=branko user-52=romaldki user-53=attlebor user-54=lucy user-55=onlycont user-56=bakery user-57=sosevalu user-58=crrtipdl user-59=nove user-60=boldover user-61=ladburyp user-62=stagingerris user-63=dancinggardener user-64=kategilpin user-65=design user-66=oubpgvbx user-67=tstardom user-68=what user-69=cath user-70=sketchy user-71=havantho user-72=nvihkvu user-73=ulsukarm user-74=markward user-75=foundation user-76=booff user-77=athenare user-78=connect9 user-79=vantagep user-80=maflemin user-81=lbscrmod user-82=still user-83=agproduc user-84=stephani user-85=leereyn1 user-86=jarvisin user-87=spectrum user-88=theblack user-89=hodgesonweb user-90=wilsonsw user-91=musorguk user-92=megacards user-93=lakesan1 user-94=brmrjxl user-95=strathar user-96=sarafoundation user-97=atestord user-98=lbhyisi user-99=hhdugcor user-100=magichat user-101=martsblo user-102=dickemery123
Sep 20 06:10:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ptkxhsbt user-104=clarkass user-105=firstrel user-106=costestimatorco user-107=firstred user-108=southlon user-109=highlegh user-110=seftvta user-111=jonhartl user-112=ultbcrra user-113=firstres user-114=opaiscyx user-115=coursemc user-116=accooper user-117=ianrayne user-118=connectedshoppin user-119=thqkgnbz user-120=milloyco user-121=gilpin user-122=elecleis user-123=hubmaster user-124=carsinyo user-125=fetch user-126=bedfords user-127=belle user-128=ggaaorgu user-129=newstoda user-130=bemadonn user-131=brighto1 user-132=nstriton user-133=firstre2 user-134=vivienn1 user-135=battlere user-136=oneoarco user-137=innovat1 user-138=stuartge user-139=askhform user-140=nativene user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 06:10:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 06:10:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:53 nativespace-cdp sudo[15063]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 06:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:54 nativespace-cdp sudo[15071]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jHuNOhLSARXljyxi.~
Sep 20 06:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:55 nativespace-cdp sudo[15074]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jHuNOhLSARXljyxi.~'
Sep 20 06:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:55 nativespace-cdp sudo[15078]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jHuNOhLSARXljyxi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 06:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:55 nativespace-cdp sudo[15082]: pam_unix(sudo:session): session closed for user root
Sep 20 06:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 06:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 06:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:10:55 nativespace-cdp sudo[15085]: pam_unix(sudo:session): session closed for user root
Sep 20 06:11:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 06:11:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 06:11:21 nativespace-cdp sudo[15158]: pam_unix(sudo:session): session closed for user root
Sep 20 06:11:37 nativespace-cdp sshd[15209]: Connection closed by 159.100.136.21 port 48232 [preauth]
Sep 20 06:16:33 nativespace-cdp sshd[16388]: Connection closed by 159.100.136.21 port 57848 [preauth]
Sep 20 06:21:34 nativespace-cdp sshd[17569]: Connection closed by 159.100.136.21 port 39360 [preauth]
Sep 20 06:26:34 nativespace-cdp sshd[19010]: Connection closed by 159.100.136.21 port 49048 [preauth]
Sep 20 06:31:35 nativespace-cdp sshd[20198]: Connection closed by 159.100.136.21 port 58128 [preauth]
Sep 20 06:36:33 nativespace-cdp sshd[21747]: Connection closed by 159.100.136.21 port 39748 [preauth]
Sep 20 06:41:34 nativespace-cdp sshd[22806]: Connection closed by 159.100.136.21 port 49080 [preauth]
Sep 20 06:46:37 nativespace-cdp sshd[23856]: Connection closed by 159.100.136.21 port 58354 [preauth]
Sep 20 06:56:34 nativespace-cdp sshd[26340]: Connection closed by 159.100.136.21 port 47930 [preauth]
Sep 20 07:01:34 nativespace-cdp sshd[27380]: Connection closed by 159.100.136.21 port 56920 [preauth]
Sep 20 07:06:33 nativespace-cdp sshd[29097]: Connection closed by 159.100.136.21 port 38506 [preauth]
Sep 20 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:19 nativespace-cdp sudo[29587]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:19 nativespace-cdp sudo[29591]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 07:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:23 nativespace-cdp sudo[29594]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:23 nativespace-cdp sudo[29607]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:37 nativespace-cdp sudo[29610]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 07:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:37 nativespace-cdp sudo[29640]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:38 nativespace-cdp sudo[29644]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:38 nativespace-cdp sudo[29647]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:38 nativespace-cdp sudo[29650]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:38 nativespace-cdp sudo[29653]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 07:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:38 nativespace-cdp sudo[29656]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 07:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:09:52 nativespace-cdp sudo[29757]: pam_unix(sudo:session): session closed for user root
Sep 20 07:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 07:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:01 nativespace-cdp sudo[29764]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=howardon user-2=paulmca1 user-3=pugwash user-4=cwsocial user-5=cathski user-6=cambria1 user-7=ninejimm user-8=reliable user-9=eugincou user-10=courseme user-11=hirefootballgame user-12=lkpier user-13=ctedorgu user-14=philmcph user-15=steakbridieme user-16=firstre5 user-17=donnychicago user-18=nscdp user-19=health2045 user-20=fortunaz user-21=foods user-22=leftie user-23=hidden user-24=nomistakes user-25=tigerlet user-26=barbersh user-27=isleofwi user-28=smrszyqg user-29=nsceres user-30=burydropin user-31=fawcettd user-32=dhyana user-33=beauty user-34=eatspam user-35=darkstar user-36=sibtoncc user-37=asandcoc user-38=steve user-39=bwppodcast user-40=zebrapho user-41=sketchy user-42=cath user-43=havantho user-44=nvihkvu user-45=tstardom user-46=oubpgvbx user-47=what user-48=design user-49=ladburyp
Sep 20 07:10:01 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=dancinggardener user-51=stagingerris user-52=kategilpin user-53=boldover user-54=nove user-55=bakery user-56=sosevalu user-57=crrtipdl user-58=onlycont user-59=attlebor user-60=lucy user-61=romaldki user-62=hodgsonmail user-63=ranxterc user-64=outdoorc user-65=branko user-66=jennimil user-67=tomandle user-68=careers user-69=nbhavers user-70=david user-71=chrisdal user-72=mcdermos user-73=dickemery123 user-74=ptkxhsbt user-75=martsblo user-76=magichat user-77=lbhyisi user-78=hhdugcor user-79=strathar user-80=sarafoundation user-81=atestord user-82=lakesan1 user-83=brmrjxl user-84=musorguk user-85=megacards user-86=wilsonsw user-87=spectrum user-88=hodgesonweb user-89=theblack user-90=jarvisin user-91=stephani user-92=leereyn1 user-93=still user-94=agproduc user-95=athenare user-96=connect9 user-97=vantagep user-98=maflemin user-99=lbscrmod user-100=booff user-101=markward user-102=foundation
Sep 20 07:10:01 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ulsukarm user-104=skyfirec user-105=alexadmin user-106=nativene user-107=innovat1 user-108=stuartge user-109=askhform user-110=firstre2 user-111=vivienn1 user-112=battlere user-113=oneoarco user-114=brighto1 user-115=nstriton user-116=ggaaorgu user-117=belle user-118=newstoda user-119=bemadonn user-120=bedfords user-121=hubmaster user-122=carsinyo user-123=fetch user-124=gilpin user-125=milloyco user-126=elecleis user-127=connectedshoppin user-128=thqkgnbz user-129=accooper user-130=ianrayne user-131=coursemc user-132=opaiscyx user-133=seftvta user-134=jonhartl user-135=ultbcrra user-136=firstres user-137=firstred user-138=southlon user-139=highlegh user-140=clarkass user-141=firstrel user-142=costestimatorco feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 07:10:01 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 07:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:06 nativespace-cdp sudo[29791]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 07:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:10 nativespace-cdp sudo[29934]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-27EsJxGqsD9ED7XL.~
Sep 20 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:11 nativespace-cdp sudo[29937]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-27EsJxGqsD9ED7XL.~'
Sep 20 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:11 nativespace-cdp sudo[29940]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-27EsJxGqsD9ED7XL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:11 nativespace-cdp sudo[29944]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 07:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:11 nativespace-cdp sudo[29948]: pam_unix(sudo:session): session closed for user root
Sep 20 07:10:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 07:10:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 07:10:53 nativespace-cdp sudo[30198]: pam_unix(sudo:session): session closed for user root
Sep 20 07:11:33 nativespace-cdp sshd[30374]: Connection closed by 159.100.136.21 port 47476 [preauth]
Sep 20 07:16:36 nativespace-cdp sshd[31550]: Connection closed by 159.100.136.21 port 57470 [preauth]
Sep 20 07:21:33 nativespace-cdp sshd[33085]: Connection closed by 159.100.136.21 port 38836 [preauth]
Sep 20 07:26:33 nativespace-cdp sshd[34172]: Connection closed by 159.100.136.21 port 48188 [preauth]
Sep 20 07:31:34 nativespace-cdp sshd[35350]: Connection closed by 159.100.136.21 port 56670 [preauth]
Sep 20 07:36:34 nativespace-cdp sshd[36687]: Connection closed by 159.100.136.21 port 38476 [preauth]
Sep 20 07:41:33 nativespace-cdp sshd[37893]: Connection closed by 159.100.136.21 port 47936 [preauth]
Sep 20 07:46:33 nativespace-cdp sshd[38998]: Connection closed by 159.100.136.21 port 57328 [preauth]
Sep 20 07:51:36 nativespace-cdp sshd[40584]: Connection closed by 159.100.136.21 port 38560 [preauth]
Sep 20 07:56:33 nativespace-cdp sshd[41596]: Connection closed by 159.100.136.21 port 48402 [preauth]
Sep 20 08:01:34 nativespace-cdp sshd[42722]: Connection closed by 159.100.136.21 port 57942 [preauth]
Sep 20 08:06:33 nativespace-cdp sshd[44249]: Connection closed by 159.100.136.21 port 39670 [preauth]
Sep 20 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:23 nativespace-cdp sudo[44899]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:23 nativespace-cdp sudo[44903]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 08:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:28 nativespace-cdp sudo[44906]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 08:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:28 nativespace-cdp sudo[44921]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 08:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:43 nativespace-cdp sudo[44924]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:43 nativespace-cdp sudo[44966]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:43 nativespace-cdp sudo[44969]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:43 nativespace-cdp sudo[44973]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:43 nativespace-cdp sudo[44976]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:43 nativespace-cdp sudo[44979]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 08:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:44 nativespace-cdp sudo[44983]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:53 nativespace-cdp sudo[45029]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:55 nativespace-cdp sudo[45033]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jennimil user-2=tomandle user-3=nbhavers user-4=careers user-5=david user-6=mcdermos user-7=chrisdal user-8=onlycont user-9=attlebor user-10=lucy user-11=romaldki user-12=branko user-13=outdoorc user-14=hodgsonmail user-15=ranxterc user-16=boldover user-17=nove user-18=sosevalu user-19=crrtipdl user-20=bakery user-21=nvihkvu user-22=sketchy user-23=cath user-24=havantho user-25=what user-26=oubpgvbx user-27=tstardom user-28=design user-29=kategilpin user-30=ladburyp user-31=stagingerris user-32=dancinggardener user-33=asandcoc user-34=sibtoncc user-35=steve user-36=zebrapho user-37=bwppodcast user-38=nsceres user-39=burydropin user-40=fawcettd user-41=dhyana user-42=eatspam user-43=darkstar user-44=beauty user-45=ctedorgu user-46=philmcph user-47=steakbridieme user-48=donnychicago
Sep 20 08:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstre5 user-50=lkpier user-51=health2045 user-52=fortunaz user-53=leftie user-54=foods user-55=nscdp user-56=tigerlet user-57=barbersh user-58=hidden user-59=nomistakes user-60=isleofwi user-61=smrszyqg user-62=howardon user-63=paulmca1 user-64=pugwash user-65=cwsocial user-66=ninejimm user-67=reliable user-68=cambria1 user-69=cathski user-70=courseme user-71=eugincou user-72=hirefootballgame user-73=opaiscyx user-74=coursemc user-75=firstres user-76=jonhartl user-77=seftvta user-78=ultbcrra user-79=southlon user-80=highlegh user-81=firstred user-82=costestimatorco user-83=firstrel user-84=clarkass user-85=carsinyo user-86=fetch user-87=hubmaster user-88=elecleis user-89=milloyco user-90=gilpin user-91=thqkgnbz user-92=connectedshoppin user-93=ianrayne user-94=accooper user-95=battlere user-96=oneoarco user-97=firstre2 user-98=vivienn1 user-99=brighto1 user-100=nstriton user-101=bemadonn
Sep 20 08:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=ggaaorgu user-103=belle user-104=newstoda user-105=bedfords user-106=skyfirec user-107=alexadmin user-108=nativene user-109=stuartge user-110=askhform user-111=innovat1 user-112=maflemin user-113=lbscrmod user-114=athenare user-115=connect9 user-116=vantagep user-117=markward user-118=foundation user-119=booff user-120=ulsukarm user-121=theblack user-122=hodgesonweb user-123=spectrum user-124=jarvisin user-125=leereyn1 user-126=stephani user-127=still user-128=agproduc user-129=sarafoundation user-130=atestord user-131=strathar user-132=lakesan1 user-133=brmrjxl user-134=musorguk user-135=megacards user-136=wilsonsw user-137=ptkxhsbt user-138=dickemery123 user-139=martsblo user-140=magichat user-141=lbhyisi user-142=hhdugcor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 08:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 08:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:58 nativespace-cdp sudo[45041]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:59 nativespace-cdp sudo[45107]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sL5qMb4EsFAeOGIE.~
Sep 20 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:59 nativespace-cdp sudo[45110]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sL5qMb4EsFAeOGIE.~'
Sep 20 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:59 nativespace-cdp sudo[45113]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sL5qMb4EsFAeOGIE.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:59 nativespace-cdp sudo[45118]: pam_unix(sudo:session): session closed for user root
Sep 20 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:09:59 nativespace-cdp sudo[45122]: pam_unix(sudo:session): session closed for user root
Sep 20 08:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 08:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 08:10:27 nativespace-cdp sudo[45335]: pam_unix(sudo:session): session closed for user root
Sep 20 08:11:34 nativespace-cdp sshd[45665]: Connection closed by 159.100.136.21 port 49244 [preauth]
Sep 20 08:16:34 nativespace-cdp sshd[46801]: Connection closed by 159.100.136.21 port 58796 [preauth]
Sep 20 08:21:34 nativespace-cdp sshd[48332]: Connection closed by 159.100.136.21 port 40212 [preauth]
Sep 20 08:26:35 nativespace-cdp sshd[49537]: Connection closed by 159.100.136.21 port 50040 [preauth]
Sep 20 08:31:36 nativespace-cdp sshd[50822]: Connection closed by 159.100.136.21 port 59422 [preauth]
Sep 20 08:36:34 nativespace-cdp sshd[52538]: Connection closed by 159.100.136.21 port 40702 [preauth]
Sep 20 08:41:34 nativespace-cdp sshd[53560]: Connection closed by 159.100.136.21 port 49612 [preauth]
Sep 20 08:46:33 nativespace-cdp sshd[54727]: Connection closed by 159.100.136.21 port 59256 [preauth]
Sep 20 08:51:37 nativespace-cdp sshd[56329]: Connection closed by 159.100.136.21 port 40548 [preauth]
Sep 20 08:55:59 nativespace-cdp sshd[57167]: Invalid user koha from 172.105.126.159 port 52440
Sep 20 08:55:59 nativespace-cdp sshd[57167]: input_userauth_request: invalid user koha [preauth]
Sep 20 08:56:00 nativespace-cdp sshd[57167]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 08:56:00 nativespace-cdp sshd[57167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.105.126.159
Sep 20 08:56:02 nativespace-cdp sshd[57167]: Failed password for invalid user koha from 172.105.126.159 port 52440 ssh2
Sep 20 08:56:02 nativespace-cdp sshd[57167]: Received disconnect from 172.105.126.159 port 52440:11: Bye Bye [preauth]
Sep 20 08:56:02 nativespace-cdp sshd[57167]: Disconnected from 172.105.126.159 port 52440 [preauth]
Sep 20 08:56:34 nativespace-cdp sshd[57327]: Connection closed by 159.100.136.21 port 50532 [preauth]
Sep 20 08:56:46 nativespace-cdp sshd[57400]: Invalid user minecraft from 147.139.204.153 port 48116
Sep 20 08:56:46 nativespace-cdp sshd[57400]: input_userauth_request: invalid user minecraft [preauth]
Sep 20 08:56:46 nativespace-cdp sshd[57400]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 08:56:46 nativespace-cdp sshd[57400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.204.153
Sep 20 08:56:48 nativespace-cdp sshd[57400]: Failed password for invalid user minecraft from 147.139.204.153 port 48116 ssh2
Sep 20 08:56:48 nativespace-cdp sshd[57400]: Received disconnect from 147.139.204.153 port 48116:11: Bye Bye [preauth]
Sep 20 08:56:48 nativespace-cdp sshd[57400]: Disconnected from 147.139.204.153 port 48116 [preauth]
Sep 20 08:57:20 nativespace-cdp sshd[57495]: Connection closed by 203.198.116.95 port 38038 [preauth]
Sep 20 08:57:21 nativespace-cdp sshd[57501]: Invalid user smart from 103.189.235.16 port 40832
Sep 20 08:57:21 nativespace-cdp sshd[57501]: input_userauth_request: invalid user smart [preauth]
Sep 20 08:57:21 nativespace-cdp sshd[57501]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 08:57:21 nativespace-cdp sshd[57501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.235.16
Sep 20 08:57:23 nativespace-cdp sshd[57501]: Failed password for invalid user smart from 103.189.235.16 port 40832 ssh2
Sep 20 08:57:25 nativespace-cdp sshd[57501]: Received disconnect from 103.189.235.16 port 40832:11: Bye Bye [preauth]
Sep 20 08:57:25 nativespace-cdp sshd[57501]: Disconnected from 103.189.235.16 port 40832 [preauth]
Sep 20 08:57:29 nativespace-cdp sshd[57527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.183.218.125  user=root
Sep 20 08:57:29 nativespace-cdp sshd[57527]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 08:57:30 nativespace-cdp sshd[57527]: Failed password for root from 45.183.218.125 port 48250 ssh2
Sep 20 08:57:31 nativespace-cdp sshd[57527]: Received disconnect from 45.183.218.125 port 48250:11: Bye Bye [preauth]
Sep 20 08:57:31 nativespace-cdp sshd[57527]: Disconnected from 45.183.218.125 port 48250 [preauth]
Sep 20 08:58:42 nativespace-cdp sshd[57848]: Invalid user sammy from 45.183.218.125 port 57112
Sep 20 08:58:42 nativespace-cdp sshd[57848]: input_userauth_request: invalid user sammy [preauth]
Sep 20 08:58:42 nativespace-cdp sshd[57848]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 08:58:42 nativespace-cdp sshd[57848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.183.218.125
Sep 20 08:58:44 nativespace-cdp sshd[57848]: Failed password for invalid user sammy from 45.183.218.125 port 57112 ssh2
Sep 20 08:58:44 nativespace-cdp sshd[57848]: Received disconnect from 45.183.218.125 port 57112:11: Bye Bye [preauth]
Sep 20 08:58:44 nativespace-cdp sshd[57848]: Disconnected from 45.183.218.125 port 57112 [preauth]
Sep 20 08:59:28 nativespace-cdp sshd[57985]: Invalid user iptv from 45.183.218.125 port 53792
Sep 20 08:59:28 nativespace-cdp sshd[57985]: input_userauth_request: invalid user iptv [preauth]
Sep 20 08:59:28 nativespace-cdp sshd[57985]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 08:59:28 nativespace-cdp sshd[57985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.183.218.125
Sep 20 08:59:30 nativespace-cdp sshd[57985]: Failed password for invalid user iptv from 45.183.218.125 port 53792 ssh2
Sep 20 08:59:30 nativespace-cdp sshd[57985]: Received disconnect from 45.183.218.125 port 53792:11: Bye Bye [preauth]
Sep 20 08:59:30 nativespace-cdp sshd[57985]: Disconnected from 45.183.218.125 port 53792 [preauth]
Sep 20 08:59:38 nativespace-cdp sshd[58037]: Invalid user elemental from 103.189.235.16 port 33316
Sep 20 08:59:38 nativespace-cdp sshd[58037]: input_userauth_request: invalid user elemental [preauth]
Sep 20 08:59:38 nativespace-cdp sshd[58037]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 08:59:38 nativespace-cdp sshd[58037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.235.16
Sep 20 08:59:40 nativespace-cdp sshd[58037]: Failed password for invalid user elemental from 103.189.235.16 port 33316 ssh2
Sep 20 08:59:41 nativespace-cdp sshd[58037]: Received disconnect from 103.189.235.16 port 33316:11: Bye Bye [preauth]
Sep 20 08:59:41 nativespace-cdp sshd[58037]: Disconnected from 103.189.235.16 port 33316 [preauth]
Sep 20 09:00:15 nativespace-cdp sshd[58303]: Invalid user jenkins from 172.105.126.159 port 41418
Sep 20 09:00:15 nativespace-cdp sshd[58303]: input_userauth_request: invalid user jenkins [preauth]
Sep 20 09:00:15 nativespace-cdp sshd[58303]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 09:00:15 nativespace-cdp sshd[58303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.105.126.159
Sep 20 09:00:17 nativespace-cdp sshd[58303]: Failed password for invalid user jenkins from 172.105.126.159 port 41418 ssh2
Sep 20 09:00:18 nativespace-cdp sshd[58303]: Received disconnect from 172.105.126.159 port 41418:11: Bye Bye [preauth]
Sep 20 09:00:18 nativespace-cdp sshd[58303]: Disconnected from 172.105.126.159 port 41418 [preauth]
Sep 20 09:00:37 nativespace-cdp sshd[58394]: Invalid user steam from 103.189.235.16 port 57968
Sep 20 09:00:37 nativespace-cdp sshd[58394]: input_userauth_request: invalid user steam [preauth]
Sep 20 09:00:37 nativespace-cdp sshd[58394]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 09:00:37 nativespace-cdp sshd[58394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.235.16
Sep 20 09:00:40 nativespace-cdp sshd[58394]: Failed password for invalid user steam from 103.189.235.16 port 57968 ssh2
Sep 20 09:00:40 nativespace-cdp sshd[58394]: Received disconnect from 103.189.235.16 port 57968:11: Bye Bye [preauth]
Sep 20 09:00:40 nativespace-cdp sshd[58394]: Disconnected from 103.189.235.16 port 57968 [preauth]
Sep 20 09:01:08 nativespace-cdp sshd[58645]: Invalid user server from 172.105.126.159 port 57258
Sep 20 09:01:08 nativespace-cdp sshd[58645]: input_userauth_request: invalid user server [preauth]
Sep 20 09:01:08 nativespace-cdp sshd[58645]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 09:01:08 nativespace-cdp sshd[58645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.105.126.159
Sep 20 09:01:11 nativespace-cdp sshd[58645]: Failed password for invalid user server from 172.105.126.159 port 57258 ssh2
Sep 20 09:01:33 nativespace-cdp sshd[58874]: Connection closed by 159.100.136.21 port 60100 [preauth]
Sep 20 09:02:22 nativespace-cdp sshd[59129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.204.153  user=root
Sep 20 09:02:22 nativespace-cdp sshd[59129]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 09:02:24 nativespace-cdp sshd[59129]: Failed password for root from 147.139.204.153 port 51344 ssh2
Sep 20 09:02:24 nativespace-cdp sshd[59129]: Received disconnect from 147.139.204.153 port 51344:11: Bye Bye [preauth]
Sep 20 09:02:24 nativespace-cdp sshd[59129]: Disconnected from 147.139.204.153 port 51344 [preauth]
Sep 20 09:02:59 nativespace-cdp sshd[59317]: Invalid user postgres from 147.139.204.153 port 55078
Sep 20 09:02:59 nativespace-cdp sshd[59317]: input_userauth_request: invalid user postgres [preauth]
Sep 20 09:02:59 nativespace-cdp sshd[59317]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 09:02:59 nativespace-cdp sshd[59317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.139.204.153
Sep 20 09:03:01 nativespace-cdp sshd[59317]: Failed password for invalid user postgres from 147.139.204.153 port 55078 ssh2
Sep 20 09:06:33 nativespace-cdp sshd[60331]: Connection closed by 159.100.136.21 port 41890 [preauth]
Sep 20 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:09:29 nativespace-cdp sudo[61088]: pam_unix(sudo:session): session closed for user root
Sep 20 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:09:29 nativespace-cdp sudo[61106]: pam_unix(sudo:session): session closed for user root
Sep 20 09:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 09:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:09:51 nativespace-cdp sudo[61111]: pam_unix(sudo:session): session closed for user root
Sep 20 09:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 09:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:09:51 nativespace-cdp sudo[61285]: pam_unix(sudo:session): session closed for user root
Sep 20 09:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 09:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:02 nativespace-cdp sudo[61288]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 09:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:04 nativespace-cdp sudo[61415]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 09:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:04 nativespace-cdp sudo[61426]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 09:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:04 nativespace-cdp sudo[61429]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 09:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:04 nativespace-cdp sudo[61433]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 09:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:04 nativespace-cdp sudo[61439]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 09:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:05 nativespace-cdp sudo[61450]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:12 nativespace-cdp sudo[61489]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 09:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:18 nativespace-cdp sudo[61505]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=firstrel user-3=clarkass user-4=highlegh user-5=southlon user-6=firstred user-7=firstres user-8=ultbcrra user-9=seftvta user-10=jonhartl user-11=coursemc user-12=opaiscyx user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=gilpin user-19=milloyco user-20=fetch user-21=carsinyo user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=newstoda user-26=belle user-27=ggaaorgu user-28=nstriton user-29=brighto1 user-30=oneoarco user-31=battlere user-32=vivienn1 user-33=firstre2 user-34=stuartge user-35=askhform user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=booff user-42=markward user-43=foundation user-44=lbscrmod user-45=maflemin user-46=vantagep user-47=athenare user-48=connect9
Sep 20 09:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=hodgesonweb user-55=theblack user-56=spectrum user-57=wilsonsw user-58=megacards user-59=musorguk user-60=brmrjxl user-61=lakesan1 user-62=atestord user-63=sarafoundation user-64=strathar user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=david user-74=careers user-75=nbhavers user-76=tomandle user-77=jennimil user-78=branko user-79=ranxterc user-80=hodgsonmail user-81=outdoorc user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=crrtipdl user-87=sosevalu user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=stagingerris user-93=dancinggardener user-94=ladburyp user-95=design user-96=what user-97=oubpgvbx user-98=tstardom user-99=nvihkvu user-100=havantho user-101=sketchy user-102=cath
Sep 20 09:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=darkstar user-109=eatspam user-110=beauty user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=tigerlet user-118=barbersh user-119=nomistakes user-120=hidden user-121=leftie user-122=foods user-123=health2045 user-124=fortunaz user-125=nscdp user-126=firstre5 user-127=donnychicago user-128=steakbridieme user-129=ctedorgu user-130=philmcph user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=ninejimm user-136=reliable user-137=cambria1 user-138=cathski user-139=cwsocial user-140=howardon user-141=paulmca1 user-142=pugwash feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 09:10:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 09:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:22 nativespace-cdp sudo[61529]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:23 nativespace-cdp sudo[61563]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rD3BtT8csD95u2cy.~
Sep 20 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:23 nativespace-cdp sudo[61568]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rD3BtT8csD95u2cy.~'
Sep 20 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:23 nativespace-cdp sudo[61571]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-rD3BtT8csD95u2cy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:23 nativespace-cdp sudo[61575]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 09:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:23 nativespace-cdp sudo[61578]: pam_unix(sudo:session): session closed for user root
Sep 20 09:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 09:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 09:10:34 nativespace-cdp sudo[61625]: pam_unix(sudo:session): session closed for user root
Sep 20 09:11:33 nativespace-cdp sshd[62032]: Connection closed by 159.100.136.21 port 51234 [preauth]
Sep 20 09:15:42 nativespace-cdp sshd[63038]: Bad protocol version identification '\026\003\001' from 206.168.34.219 port 53166
Sep 20 09:16:07 nativespace-cdp sshd[63053]: Connection closed by 206.168.34.219 port 50844 [preauth]
Sep 20 09:16:33 nativespace-cdp sshd[63291]: Connection closed by 159.100.136.21 port 60772 [preauth]
Sep 20 09:21:33 nativespace-cdp sshd[64900]: Connection closed by 159.100.136.21 port 41840 [preauth]
Sep 20 09:26:34 nativespace-cdp sshd[66083]: Connection closed by 159.100.136.21 port 50832 [preauth]
Sep 20 09:31:36 nativespace-cdp sshd[67363]: Connection closed by 159.100.136.21 port 60320 [preauth]
Sep 20 09:36:35 nativespace-cdp sshd[69050]: Connection closed by 159.100.136.21 port 41332 [preauth]
Sep 20 09:41:35 nativespace-cdp sshd[71148]: Connection closed by 159.100.136.21 port 51042 [preauth]
Sep 20 09:46:34 nativespace-cdp sshd[72492]: Connection closed by 159.100.136.21 port 60758 [preauth]
Sep 20 09:51:33 nativespace-cdp sshd[73827]: Connection closed by 159.100.136.21 port 42084 [preauth]
Sep 20 09:56:34 nativespace-cdp sshd[75202]: Connection closed by 159.100.136.21 port 51812 [preauth]
Sep 20 10:01:33 nativespace-cdp sshd[76624]: Connection closed by 159.100.136.21 port 60888 [preauth]
Sep 20 10:06:33 nativespace-cdp sshd[78287]: Connection closed by 159.100.136.21 port 42568 [preauth]
Sep 20 10:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 10:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:23 nativespace-cdp sudo[79000]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 10:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:23 nativespace-cdp sudo[79005]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 10:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:27 nativespace-cdp sudo[79009]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 10:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:28 nativespace-cdp sudo[79024]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 10:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:41 nativespace-cdp sudo[79028]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 10:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:41 nativespace-cdp sudo[79069]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 10:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:41 nativespace-cdp sudo[79072]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 10:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:41 nativespace-cdp sudo[79075]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 10:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:41 nativespace-cdp sudo[79078]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 10:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:41 nativespace-cdp sudo[79082]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:42 nativespace-cdp sudo[79087]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 10:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:47 nativespace-cdp sudo[79103]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 10:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:49 nativespace-cdp sudo[79109]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=milloyco user-2=gilpin user-3=elecleis user-4=hubmaster user-5=carsinyo user-6=fetch user-7=accooper user-8=ianrayne user-9=connectedshoppin user-10=thqkgnbz user-11=seftvta user-12=jonhartl user-13=ultbcrra user-14=firstres user-15=opaiscyx user-16=coursemc user-17=firstrel user-18=clarkass user-19=costestimatorco user-20=firstred user-21=southlon user-22=highlegh user-23=alexadmin user-24=skyfirec user-25=innovat1 user-26=askhform user-27=stuartge user-28=nativene user-29=brighto1 user-30=nstriton user-31=firstre2 user-32=vivienn1 user-33=battlere user-34=oneoarco user-35=bedfords user-36=belle user-37=ggaaorgu user-38=newstoda user-39=bemadonn user-40=jarvisin user-41=spectrum user-42=theblack user-43=hodgesonweb user-44=still user-45=agproduc user-46=stephani user-47=leereyn1 user-48=booff
Sep 20 10:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=markward user-50=foundation user-51=athenare user-52=connect9 user-53=vantagep user-54=maflemin user-55=lbscrmod user-56=ulsukarm user-57=martsblo user-58=dickemery123 user-59=ptkxhsbt user-60=lbhyisi user-61=hhdugcor user-62=magichat user-63=brmrjxl user-64=lakesan1 user-65=strathar user-66=sarafoundation user-67=atestord user-68=wilsonsw user-69=musorguk user-70=megacards user-71=attlebor user-72=lucy user-73=onlycont user-74=ranxterc user-75=hodgsonmail user-76=outdoorc user-77=branko user-78=romaldki user-79=tomandle user-80=jennimil user-81=chrisdal user-82=mcdermos user-83=nbhavers user-84=careers user-85=david user-86=tstardom user-87=oubpgvbx user-88=what user-89=cath user-90=sketchy user-91=havantho user-92=nvihkvu user-93=ladburyp user-94=stagingerris user-95=dancinggardener user-96=kategilpin user-97=design user-98=nove user-99=boldover user-100=bakery user-101=sosevalu user-102=crrtipdl
Sep 20 10:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=burydropin user-104=fawcettd user-105=nsceres user-106=beauty user-107=eatspam user-108=darkstar user-109=dhyana user-110=asandcoc user-111=sibtoncc user-112=bwppodcast user-113=zebrapho user-114=steve user-115=cambria1 user-116=cathski user-117=reliable user-118=ninejimm user-119=howardon user-120=pugwash user-121=paulmca1 user-122=cwsocial user-123=hirefootballgame user-124=eugincou user-125=courseme user-126=nscdp user-127=fortunaz user-128=health2045 user-129=foods user-130=leftie user-131=lkpier user-132=philmcph user-133=ctedorgu user-134=steakbridieme user-135=firstre5 user-136=donnychicago user-137=isleofwi user-138=smrszyqg user-139=hidden user-140=nomistakes user-141=barbersh user-142=tigerlet feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 10:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 10:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:50 nativespace-cdp sudo[79117]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:51 nativespace-cdp sudo[79124]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WtXUSUqzsS1ETiDb.~
Sep 20 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:51 nativespace-cdp sudo[79128]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WtXUSUqzsS1ETiDb.~'
Sep 20 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:51 nativespace-cdp sudo[79131]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-WtXUSUqzsS1ETiDb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:51 nativespace-cdp sudo[79135]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:51 nativespace-cdp sudo[79138]: pam_unix(sudo:session): session closed for user root
Sep 20 10:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 10:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 10:09:54 nativespace-cdp sudo[79159]: pam_unix(sudo:session): session closed for user root
Sep 20 10:11:35 nativespace-cdp sshd[79601]: Connection closed by 159.100.136.21 port 52162 [preauth]
Sep 20 10:16:33 nativespace-cdp sshd[80993]: Connection closed by 159.100.136.21 port 33630 [preauth]
Sep 20 10:21:35 nativespace-cdp sshd[82722]: Connection closed by 159.100.136.21 port 43138 [preauth]
Sep 20 10:24:27 nativespace-cdp sshd[83379]: Invalid user sysadmin from 201.102.109.106 port 60233
Sep 20 10:24:27 nativespace-cdp sshd[83379]: input_userauth_request: invalid user sysadmin [preauth]
Sep 20 10:24:27 nativespace-cdp sshd[83379]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:24:27 nativespace-cdp sshd[83379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.109.106
Sep 20 10:24:29 nativespace-cdp sshd[83379]: Failed password for invalid user sysadmin from 201.102.109.106 port 60233 ssh2
Sep 20 10:24:32 nativespace-cdp sshd[83379]: Received disconnect from 201.102.109.106 port 60233:11: Bye Bye [preauth]
Sep 20 10:24:32 nativespace-cdp sshd[83379]: Disconnected from 201.102.109.106 port 60233 [preauth]
Sep 20 10:24:36 nativespace-cdp sshd[83395]: Invalid user deploy from 23.94.83.12 port 48522
Sep 20 10:24:36 nativespace-cdp sshd[83395]: input_userauth_request: invalid user deploy [preauth]
Sep 20 10:24:36 nativespace-cdp sshd[83395]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:24:36 nativespace-cdp sshd[83395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.83.12
Sep 20 10:24:38 nativespace-cdp sshd[83395]: Failed password for invalid user deploy from 23.94.83.12 port 48522 ssh2
Sep 20 10:24:38 nativespace-cdp sshd[83395]: Received disconnect from 23.94.83.12 port 48522:11: Bye Bye [preauth]
Sep 20 10:24:38 nativespace-cdp sshd[83395]: Disconnected from 23.94.83.12 port 48522 [preauth]
Sep 20 10:26:33 nativespace-cdp sshd[83890]: Connection closed by 159.100.136.21 port 53184 [preauth]
Sep 20 10:28:38 nativespace-cdp sshd[84398]: Invalid user username from 52.161.23.249 port 48668
Sep 20 10:28:38 nativespace-cdp sshd[84398]: input_userauth_request: invalid user username [preauth]
Sep 20 10:28:39 nativespace-cdp sshd[84398]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:28:39 nativespace-cdp sshd[84398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.23.249
Sep 20 10:28:41 nativespace-cdp sshd[84398]: Failed password for invalid user username from 52.161.23.249 port 48668 ssh2
Sep 20 10:28:41 nativespace-cdp sshd[84398]: Received disconnect from 52.161.23.249 port 48668:11: Bye Bye [preauth]
Sep 20 10:28:41 nativespace-cdp sshd[84398]: Disconnected from 52.161.23.249 port 48668 [preauth]
Sep 20 10:29:05 nativespace-cdp sshd[84478]: Invalid user ubuntu from 103.160.148.170 port 56142
Sep 20 10:29:05 nativespace-cdp sshd[84478]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 10:29:05 nativespace-cdp sshd[84478]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:29:05 nativespace-cdp sshd[84478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.148.170
Sep 20 10:29:07 nativespace-cdp sshd[84478]: Failed password for invalid user ubuntu from 103.160.148.170 port 56142 ssh2
Sep 20 10:29:11 nativespace-cdp sshd[84478]: Received disconnect from 103.160.148.170 port 56142:11: Bye Bye [preauth]
Sep 20 10:29:11 nativespace-cdp sshd[84478]: Disconnected from 103.160.148.170 port 56142 [preauth]
Sep 20 10:29:18 nativespace-cdp sshd[84622]: Invalid user tomcat from 23.94.83.12 port 36086
Sep 20 10:29:18 nativespace-cdp sshd[84622]: input_userauth_request: invalid user tomcat [preauth]
Sep 20 10:29:18 nativespace-cdp sshd[84622]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:29:18 nativespace-cdp sshd[84622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.83.12
Sep 20 10:29:20 nativespace-cdp sshd[84622]: Failed password for invalid user tomcat from 23.94.83.12 port 36086 ssh2
Sep 20 10:29:20 nativespace-cdp sshd[84622]: Received disconnect from 23.94.83.12 port 36086:11: Bye Bye [preauth]
Sep 20 10:29:20 nativespace-cdp sshd[84622]: Disconnected from 23.94.83.12 port 36086 [preauth]
Sep 20 10:29:29 nativespace-cdp sshd[84647]: Connection closed by 103.82.93.206 port 44358 [preauth]
Sep 20 10:30:00 nativespace-cdp sshd[84754]: Invalid user ubuntu from 23.94.83.12 port 44296
Sep 20 10:30:00 nativespace-cdp sshd[84754]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 10:30:00 nativespace-cdp sshd[84754]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:30:00 nativespace-cdp sshd[84754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.83.12
Sep 20 10:30:01 nativespace-cdp sshd[84756]: Invalid user acer from 103.160.148.170 port 37532
Sep 20 10:30:01 nativespace-cdp sshd[84756]: input_userauth_request: invalid user acer [preauth]
Sep 20 10:30:01 nativespace-cdp sshd[84756]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:30:01 nativespace-cdp sshd[84756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.148.170
Sep 20 10:30:01 nativespace-cdp sshd[84754]: Failed password for invalid user ubuntu from 23.94.83.12 port 44296 ssh2
Sep 20 10:30:02 nativespace-cdp sshd[84754]: Received disconnect from 23.94.83.12 port 44296:11: Bye Bye [preauth]
Sep 20 10:30:02 nativespace-cdp sshd[84754]: Disconnected from 23.94.83.12 port 44296 [preauth]
Sep 20 10:30:03 nativespace-cdp sshd[84756]: Failed password for invalid user acer from 103.160.148.170 port 37532 ssh2
Sep 20 10:30:03 nativespace-cdp sshd[84756]: Received disconnect from 103.160.148.170 port 37532:11: Bye Bye [preauth]
Sep 20 10:30:03 nativespace-cdp sshd[84756]: Disconnected from 103.160.148.170 port 37532 [preauth]
Sep 20 10:30:04 nativespace-cdp sshd[84887]: Invalid user thomas from 52.161.23.249 port 34778
Sep 20 10:30:04 nativespace-cdp sshd[84887]: input_userauth_request: invalid user thomas [preauth]
Sep 20 10:30:04 nativespace-cdp sshd[84887]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:30:04 nativespace-cdp sshd[84887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.23.249
Sep 20 10:30:07 nativespace-cdp sshd[84887]: Failed password for invalid user thomas from 52.161.23.249 port 34778 ssh2
Sep 20 10:30:07 nativespace-cdp sshd[84887]: Received disconnect from 52.161.23.249 port 34778:11: Bye Bye [preauth]
Sep 20 10:30:07 nativespace-cdp sshd[84887]: Disconnected from 52.161.23.249 port 34778 [preauth]
Sep 20 10:30:21 nativespace-cdp sshd[85005]: Invalid user test from 201.102.109.106 port 13921
Sep 20 10:30:21 nativespace-cdp sshd[85005]: input_userauth_request: invalid user test [preauth]
Sep 20 10:30:21 nativespace-cdp sshd[85005]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:30:21 nativespace-cdp sshd[85005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.109.106
Sep 20 10:30:23 nativespace-cdp sshd[85005]: Failed password for invalid user test from 201.102.109.106 port 13921 ssh2
Sep 20 10:30:23 nativespace-cdp sshd[85005]: Received disconnect from 201.102.109.106 port 13921:11: Bye Bye [preauth]
Sep 20 10:30:23 nativespace-cdp sshd[85005]: Disconnected from 201.102.109.106 port 13921 [preauth]
Sep 20 10:30:46 nativespace-cdp sshd[85078]: Invalid user abhishek from 52.161.23.249 port 47896
Sep 20 10:30:46 nativespace-cdp sshd[85078]: input_userauth_request: invalid user abhishek [preauth]
Sep 20 10:30:46 nativespace-cdp sshd[85078]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:30:46 nativespace-cdp sshd[85078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.23.249
Sep 20 10:30:48 nativespace-cdp sshd[85078]: Failed password for invalid user abhishek from 52.161.23.249 port 47896 ssh2
Sep 20 10:30:48 nativespace-cdp sshd[85078]: Received disconnect from 52.161.23.249 port 47896:11: Bye Bye [preauth]
Sep 20 10:30:48 nativespace-cdp sshd[85078]: Disconnected from 52.161.23.249 port 47896 [preauth]
Sep 20 10:30:51 nativespace-cdp sshd[85098]: Invalid user superman from 103.160.148.170 port 36504
Sep 20 10:30:51 nativespace-cdp sshd[85098]: input_userauth_request: invalid user superman [preauth]
Sep 20 10:30:51 nativespace-cdp sshd[85098]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:30:51 nativespace-cdp sshd[85098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.160.148.170
Sep 20 10:30:54 nativespace-cdp sshd[85098]: Failed password for invalid user superman from 103.160.148.170 port 36504 ssh2
Sep 20 10:30:54 nativespace-cdp sshd[85098]: Received disconnect from 103.160.148.170 port 36504:11: Bye Bye [preauth]
Sep 20 10:30:54 nativespace-cdp sshd[85098]: Disconnected from 103.160.148.170 port 36504 [preauth]
Sep 20 10:31:02 nativespace-cdp sshd[85233]: Invalid user tomcat from 201.102.109.106 port 5045
Sep 20 10:31:02 nativespace-cdp sshd[85233]: input_userauth_request: invalid user tomcat [preauth]
Sep 20 10:31:02 nativespace-cdp sshd[85233]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 10:31:02 nativespace-cdp sshd[85233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.109.106
Sep 20 10:31:04 nativespace-cdp sshd[85233]: Failed password for invalid user tomcat from 201.102.109.106 port 5045 ssh2
Sep 20 10:31:04 nativespace-cdp sshd[85233]: Received disconnect from 201.102.109.106 port 5045:11: Bye Bye [preauth]
Sep 20 10:31:04 nativespace-cdp sshd[85233]: Disconnected from 201.102.109.106 port 5045 [preauth]
Sep 20 10:31:36 nativespace-cdp sshd[85361]: Connection closed by 159.100.136.21 port 34636 [preauth]
Sep 20 10:36:34 nativespace-cdp sshd[86752]: Connection closed by 159.100.136.21 port 44320 [preauth]
Sep 20 10:41:35 nativespace-cdp sshd[87951]: Connection closed by 159.100.136.21 port 53928 [preauth]
Sep 20 10:46:34 nativespace-cdp sshd[89196]: Connection closed by 159.100.136.21 port 35242 [preauth]
Sep 20 10:51:33 nativespace-cdp sshd[90837]: Connection closed by 159.100.136.21 port 44948 [preauth]
Sep 20 10:56:34 nativespace-cdp sshd[92130]: Connection closed by 159.100.136.21 port 54808 [preauth]
Sep 20 10:56:34 nativespace-cdp sshd[92130]: Connection closed by 159.100.136.21 port 54808 [preauth]
Sep 20 11:01:33 nativespace-cdp sshd[93568]: Connection closed by 159.100.136.21 port 36084 [preauth]
Sep 20 11:06:33 nativespace-cdp sshd[95152]: Connection closed by 159.100.136.21 port 45970 [preauth]
Sep 20 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:09:24 nativespace-cdp sudo[95766]: pam_unix(sudo:session): session closed for user root
Sep 20 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:09:24 nativespace-cdp sudo[95774]: pam_unix(sudo:session): session closed for user root
Sep 20 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:09:40 nativespace-cdp sudo[95777]: pam_unix(sudo:session): session closed for user root
Sep 20 11:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 11:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:09:40 nativespace-cdp sudo[95834]: pam_unix(sudo:session): session closed for user root
Sep 20 11:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 11:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:09:59 nativespace-cdp sudo[95837]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:00 nativespace-cdp sudo[95892]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:00 nativespace-cdp sudo[95895]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:00 nativespace-cdp sudo[95899]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:00 nativespace-cdp sudo[95902]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:00 nativespace-cdp sudo[95906]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:01 nativespace-cdp sudo[95909]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:23 nativespace-cdp sudo[96082]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 11:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:30 nativespace-cdp sudo[96087]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jonhartl user-2=seftvta user-3=ultbcrra user-4=firstres user-5=opaiscyx user-6=coursemc user-7=clarkass user-8=firstrel user-9=costestimatorco user-10=firstred user-11=southlon user-12=highlegh user-13=gilpin user-14=milloyco user-15=elecleis user-16=hubmaster user-17=carsinyo user-18=fetch user-19=accooper user-20=ianrayne user-21=connectedshoppin user-22=thqkgnbz user-23=brighto1 user-24=nstriton user-25=firstre2 user-26=vivienn1 user-27=battlere user-28=oneoarco user-29=bedfords user-30=ggaaorgu user-31=belle user-32=newstoda user-33=bemadonn user-34=alexadmin user-35=skyfirec user-36=innovat1 user-37=stuartge user-38=askhform user-39=nativene user-40=markward user-41=foundation user-42=booff user-43=athenare user-44=connect9 user-45=vantagep user-46=maflemin user-47=lbscrmod user-48=ulsukarm
Sep 20 11:10:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jarvisin user-50=spectrum user-51=theblack user-52=hodgesonweb user-53=still user-54=agproduc user-55=stephani user-56=leereyn1 user-57=lakesan1 user-58=brmrjxl user-59=strathar user-60=sarafoundation user-61=atestord user-62=wilsonsw user-63=musorguk user-64=megacards user-65=martsblo user-66=dickemery123 user-67=ptkxhsbt user-68=lbhyisi user-69=hhdugcor user-70=magichat user-71=tomandle user-72=jennimil user-73=chrisdal user-74=mcdermos user-75=nbhavers user-76=careers user-77=david user-78=attlebor user-79=lucy user-80=onlycont user-81=ranxterc user-82=hodgsonmail user-83=outdoorc user-84=branko user-85=romaldki user-86=nove user-87=boldover user-88=bakery user-89=sosevalu user-90=crrtipdl user-91=tstardom user-92=oubpgvbx user-93=what user-94=sketchy user-95=cath user-96=havantho user-97=nvihkvu user-98=ladburyp user-99=stagingerris user-100=dancinggardener user-101=kategilpin user-102=design
Sep 20 11:10:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=bwppodcast user-106=zebrapho user-107=steve user-108=burydropin user-109=fawcettd user-110=nsceres user-111=beauty user-112=eatspam user-113=darkstar user-114=dhyana user-115=nscdp user-116=fortunaz user-117=health2045 user-118=foods user-119=leftie user-120=lkpier user-121=philmcph user-122=ctedorgu user-123=donnychicago user-124=firstre5 user-125=steakbridieme user-126=isleofwi user-127=smrszyqg user-128=hidden user-129=nomistakes user-130=barbersh user-131=tigerlet user-132=cambria1 user-133=cathski user-134=ninejimm user-135=reliable user-136=paulmca1 user-137=howardon user-138=pugwash user-139=cwsocial user-140=hirefootballgame user-141=eugincou user-142=courseme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 11:10:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 11:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:36 nativespace-cdp sudo[96115]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 20 11:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:44 nativespace-cdp sudo[96145]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 20 11:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 20 11:10:44 nativespace-cdp sudo[96167]: pam_unix(sudo:session): session closed for user onlycont
Sep 20 11:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 20 11:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:46 nativespace-cdp sudo[96185]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 20 11:10:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 11:10:46 nativespace-cdp sudo[96193]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 11:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 20 11:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:53 nativespace-cdp sudo[96235]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 20 11:10:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 20 11:10:54 nativespace-cdp sudo[96242]: pam_unix(sudo:session): session closed for user lkpier
Sep 20 11:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 20 11:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:56 nativespace-cdp sudo[96260]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 20 11:10:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 20 11:10:56 nativespace-cdp sudo[96269]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 20 11:10:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 20 11:10:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 20 11:10:57 nativespace-cdp sudo[96283]: pam_unix(sudo:session): session closed for user oneoarco
Sep 20 11:10:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 20 11:10:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:10:58 nativespace-cdp sudo[96294]: pam_unix(sudo:session): session closed for user root
Sep 20 11:10:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 20 11:10:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 20 11:10:59 nativespace-cdp sudo[96300]: pam_unix(sudo:session): session closed for user fortunaz
Sep 20 11:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 20 11:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:00 nativespace-cdp sudo[96317]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 11:11:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:00 nativespace-cdp sudo[96321]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 20 11:11:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:31 nativespace-cdp sudo[97317]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 20 11:11:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:31 nativespace-cdp sudo[97322]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:36 nativespace-cdp sshd[97334]: Connection closed by 159.100.136.21 port 55428 [preauth]
Sep 20 11:11:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 11:11:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:39 nativespace-cdp sudo[97342]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-a1jqHuF4CYM0TVSR.~
Sep 20 11:11:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:39 nativespace-cdp sudo[97347]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-a1jqHuF4CYM0TVSR.~'
Sep 20 11:11:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:39 nativespace-cdp sudo[97350]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-a1jqHuF4CYM0TVSR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 11:11:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:39 nativespace-cdp sudo[97354]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 11:11:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:39 nativespace-cdp sudo[97357]: pam_unix(sudo:session): session closed for user root
Sep 20 11:11:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 11:11:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 11:11:48 nativespace-cdp sudo[97387]: pam_unix(sudo:session): session closed for user root
Sep 20 11:16:36 nativespace-cdp sshd[98466]: Connection closed by 159.100.136.21 port 36802 [preauth]
Sep 20 11:21:33 nativespace-cdp sshd[99964]: Connection closed by 159.100.136.21 port 46468 [preauth]
Sep 20 11:26:35 nativespace-cdp sshd[101101]: Connection closed by 159.100.136.21 port 56426 [preauth]
Sep 20 11:31:33 nativespace-cdp sshd[102361]: Connection closed by 159.100.136.21 port 37724 [preauth]
Sep 20 11:36:35 nativespace-cdp sshd[104043]: Connection closed by 159.100.136.21 port 47666 [preauth]
Sep 20 11:44:08 nativespace-cdp sshd[106028]: Invalid user test_user from 51.75.170.22 port 33452
Sep 20 11:44:08 nativespace-cdp sshd[106028]: input_userauth_request: invalid user test_user [preauth]
Sep 20 11:44:08 nativespace-cdp sshd[106028]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:44:08 nativespace-cdp sshd[106028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.22
Sep 20 11:44:10 nativespace-cdp sshd[106028]: Failed password for invalid user test_user from 51.75.170.22 port 33452 ssh2
Sep 20 11:44:11 nativespace-cdp sshd[106028]: Received disconnect from 51.75.170.22 port 33452:11: Bye Bye [preauth]
Sep 20 11:44:11 nativespace-cdp sshd[106028]: Disconnected from 51.75.170.22 port 33452 [preauth]
Sep 20 11:44:49 nativespace-cdp sshd[106136]: Invalid user test from 142.93.62.78 port 47430
Sep 20 11:44:49 nativespace-cdp sshd[106136]: input_userauth_request: invalid user test [preauth]
Sep 20 11:44:49 nativespace-cdp sshd[106136]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:44:49 nativespace-cdp sshd[106136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.78
Sep 20 11:44:51 nativespace-cdp sshd[106136]: Failed password for invalid user test from 142.93.62.78 port 47430 ssh2
Sep 20 11:44:52 nativespace-cdp sshd[106136]: Received disconnect from 142.93.62.78 port 47430:11: Bye Bye [preauth]
Sep 20 11:44:52 nativespace-cdp sshd[106136]: Disconnected from 142.93.62.78 port 47430 [preauth]
Sep 20 11:46:33 nativespace-cdp sshd[106706]: Connection closed by 159.100.136.21 port 36656 [preauth]
Sep 20 11:46:38 nativespace-cdp sshd[106717]: Invalid user ubuntu from 51.75.170.22 port 35190
Sep 20 11:46:38 nativespace-cdp sshd[106717]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 11:46:38 nativespace-cdp sshd[106717]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:46:38 nativespace-cdp sshd[106717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.22
Sep 20 11:46:40 nativespace-cdp sshd[106717]: Failed password for invalid user ubuntu from 51.75.170.22 port 35190 ssh2
Sep 20 11:46:40 nativespace-cdp sshd[106717]: Received disconnect from 51.75.170.22 port 35190:11: Bye Bye [preauth]
Sep 20 11:46:40 nativespace-cdp sshd[106717]: Disconnected from 51.75.170.22 port 35190 [preauth]
Sep 20 11:46:52 nativespace-cdp sshd[106765]: Invalid user sopuser from 142.93.62.78 port 49402
Sep 20 11:46:52 nativespace-cdp sshd[106765]: input_userauth_request: invalid user sopuser [preauth]
Sep 20 11:46:52 nativespace-cdp sshd[106765]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:46:52 nativespace-cdp sshd[106765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.78
Sep 20 11:46:54 nativespace-cdp sshd[106765]: Failed password for invalid user sopuser from 142.93.62.78 port 49402 ssh2
Sep 20 11:46:54 nativespace-cdp sshd[106765]: Received disconnect from 142.93.62.78 port 49402:11: Bye Bye [preauth]
Sep 20 11:46:54 nativespace-cdp sshd[106765]: Disconnected from 142.93.62.78 port 49402 [preauth]
Sep 20 11:47:23 nativespace-cdp sshd[106886]: Invalid user ubuntu from 51.75.170.22 port 49990
Sep 20 11:47:23 nativespace-cdp sshd[106886]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 11:47:23 nativespace-cdp sshd[106886]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:47:23 nativespace-cdp sshd[106886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.170.22
Sep 20 11:47:24 nativespace-cdp sshd[106886]: Failed password for invalid user ubuntu from 51.75.170.22 port 49990 ssh2
Sep 20 11:47:24 nativespace-cdp sshd[106886]: Received disconnect from 51.75.170.22 port 49990:11: Bye Bye [preauth]
Sep 20 11:47:24 nativespace-cdp sshd[106886]: Disconnected from 51.75.170.22 port 49990 [preauth]
Sep 20 11:50:48 nativespace-cdp sshd[108159]: Invalid user ubuntu from 142.93.62.78 port 49016
Sep 20 11:50:48 nativespace-cdp sshd[108159]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 11:50:48 nativespace-cdp sshd[108159]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:50:48 nativespace-cdp sshd[108159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.78
Sep 20 11:50:50 nativespace-cdp sshd[108159]: Failed password for invalid user ubuntu from 142.93.62.78 port 49016 ssh2
Sep 20 11:50:50 nativespace-cdp sshd[108159]: Received disconnect from 142.93.62.78 port 49016:11: Bye Bye [preauth]
Sep 20 11:50:50 nativespace-cdp sshd[108159]: Disconnected from 142.93.62.78 port 49016 [preauth]
Sep 20 11:51:33 nativespace-cdp sshd[108365]: Connection closed by 159.100.136.21 port 46292 [preauth]
Sep 20 11:52:42 nativespace-cdp sshd[108663]: Invalid user username from 182.253.79.194 port 64481
Sep 20 11:52:42 nativespace-cdp sshd[108663]: input_userauth_request: invalid user username [preauth]
Sep 20 11:52:42 nativespace-cdp sshd[108663]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:52:42 nativespace-cdp sshd[108663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.79.194
Sep 20 11:52:43 nativespace-cdp sshd[108663]: Failed password for invalid user username from 182.253.79.194 port 64481 ssh2
Sep 20 11:52:48 nativespace-cdp sshd[108663]: Received disconnect from 182.253.79.194 port 64481:11: Bye Bye [preauth]
Sep 20 11:52:48 nativespace-cdp sshd[108663]: Disconnected from 182.253.79.194 port 64481 [preauth]
Sep 20 11:56:35 nativespace-cdp sshd[109671]: Connection closed by 159.100.136.21 port 56130 [preauth]
Sep 20 11:58:23 nativespace-cdp sshd[110229]: Invalid user sysadmin from 182.253.79.194 port 42860
Sep 20 11:58:23 nativespace-cdp sshd[110229]: input_userauth_request: invalid user sysadmin [preauth]
Sep 20 11:58:23 nativespace-cdp sshd[110229]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:58:23 nativespace-cdp sshd[110229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.79.194
Sep 20 11:58:26 nativespace-cdp sshd[110229]: Failed password for invalid user sysadmin from 182.253.79.194 port 42860 ssh2
Sep 20 11:58:28 nativespace-cdp sshd[110229]: Received disconnect from 182.253.79.194 port 42860:11: Bye Bye [preauth]
Sep 20 11:58:28 nativespace-cdp sshd[110229]: Disconnected from 182.253.79.194 port 42860 [preauth]
Sep 20 11:59:12 nativespace-cdp sshd[110398]: Invalid user nexus from 182.253.79.194 port 9879
Sep 20 11:59:12 nativespace-cdp sshd[110398]: input_userauth_request: invalid user nexus [preauth]
Sep 20 11:59:12 nativespace-cdp sshd[110398]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 11:59:12 nativespace-cdp sshd[110398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.79.194
Sep 20 11:59:14 nativespace-cdp sshd[110398]: Failed password for invalid user nexus from 182.253.79.194 port 9879 ssh2
Sep 20 11:59:14 nativespace-cdp sshd[110398]: Received disconnect from 182.253.79.194 port 9879:11: Bye Bye [preauth]
Sep 20 11:59:14 nativespace-cdp sshd[110398]: Disconnected from 182.253.79.194 port 9879 [preauth]
Sep 20 12:01:34 nativespace-cdp sshd[111203]: Connection closed by 159.100.136.21 port 37086 [preauth]
Sep 20 12:06:36 nativespace-cdp sshd[112737]: Connection closed by 159.100.136.21 port 45990 [preauth]
Sep 20 12:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 12:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:25 nativespace-cdp sudo[113390]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 12:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:25 nativespace-cdp sudo[113394]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 12:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:30 nativespace-cdp sudo[113397]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 12:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:30 nativespace-cdp sudo[113416]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 12:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:47 nativespace-cdp sudo[113419]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:47 nativespace-cdp sudo[113467]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:47 nativespace-cdp sudo[113471]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:47 nativespace-cdp sudo[113475]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:47 nativespace-cdp sudo[113478]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:47 nativespace-cdp sudo[113481]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:48 nativespace-cdp sudo[113485]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:51 nativespace-cdp sudo[113500]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 12:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:56 nativespace-cdp sudo[113507]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hidden user-2=nomistakes user-3=tigerlet user-4=barbersh user-5=smrszyqg user-6=isleofwi user-7=lkpier user-8=ctedorgu user-9=philmcph user-10=steakbridieme user-11=firstre5 user-12=donnychicago user-13=nscdp user-14=fortunaz user-15=health2045 user-16=foods user-17=leftie user-18=eugincou user-19=courseme user-20=hirefootballgame user-21=howardon user-22=paulmca1 user-23=pugwash user-24=cwsocial user-25=cathski user-26=cambria1 user-27=reliable user-28=ninejimm user-29=steve user-30=bwppodcast user-31=zebrapho user-32=asandcoc user-33=sibtoncc user-34=dhyana user-35=beauty user-36=eatspam user-37=darkstar user-38=nsceres user-39=burydropin user-40=fawcettd user-41=bakery user-42=sosevalu user-43=crrtipdl user-44=boldover user-45=nove user-46=design user-47=ladburyp user-48=stagingerris
Sep 20 12:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=dancinggardener user-50=kategilpin user-51=cath user-52=sketchy user-53=havantho user-54=nvihkvu user-55=oubpgvbx user-56=tstardom user-57=what user-58=nbhavers user-59=careers user-60=david user-61=chrisdal user-62=mcdermos user-63=jennimil user-64=tomandle user-65=romaldki user-66=hodgsonmail user-67=outdoorc user-68=ranxterc user-69=branko user-70=onlycont user-71=attlebor user-72=lucy user-73=musorguk user-74=megacards user-75=wilsonsw user-76=strathar user-77=sarafoundation user-78=atestord user-79=brmrjxl user-80=lakesan1 user-81=magichat user-82=lbhyisi user-83=hhdugcor user-84=dickemery123 user-85=ptkxhsbt user-86=martsblo user-87=ulsukarm user-88=connect9 user-89=athenare user-90=vantagep user-91=maflemin user-92=lbscrmod user-93=markward user-94=foundation user-95=booff user-96=stephani user-97=leereyn1 user-98=still user-99=agproduc user-100=spectrum user-101=hodgesonweb user-102=theblack
Sep 20 12:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=jarvisin user-104=belle user-105=ggaaorgu user-106=newstoda user-107=bemadonn user-108=bedfords user-109=firstre2 user-110=vivienn1 user-111=battlere user-112=oneoarco user-113=brighto1 user-114=nstriton user-115=nativene user-116=innovat1 user-117=askhform user-118=stuartge user-119=alexadmin user-120=skyfirec user-121=firstred user-122=southlon user-123=highlegh user-124=clarkass user-125=firstrel user-126=costestimatorco user-127=coursemc user-128=opaiscyx user-129=jonhartl user-130=seftvta user-131=ultbcrra user-132=firstres user-133=connectedshoppin user-134=thqkgnbz user-135=accooper user-136=ianrayne user-137=hubmaster user-138=carsinyo user-139=fetch user-140=gilpin user-141=milloyco user-142=elecleis feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 12:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 12:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:58 nativespace-cdp sudo[113526]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:58 nativespace-cdp sudo[113532]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IFNPv0vuQzsbv5il.~
Sep 20 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:58 nativespace-cdp sudo[113535]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IFNPv0vuQzsbv5il.~'
Sep 20 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:58 nativespace-cdp sudo[113538]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-IFNPv0vuQzsbv5il.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:58 nativespace-cdp sudo[113542]: pam_unix(sudo:session): session closed for user root
Sep 20 12:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 12:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:09:59 nativespace-cdp sudo[113545]: pam_unix(sudo:session): session closed for user root
Sep 20 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 12:10:02 nativespace-cdp sudo[113565]: pam_unix(sudo:session): session closed for user root
Sep 20 12:11:35 nativespace-cdp sshd[114096]: Connection closed by 159.100.136.21 port 55362 [preauth]
Sep 20 12:16:33 nativespace-cdp sshd[115495]: Connection closed by 159.100.136.21 port 36788 [preauth]
Sep 20 12:21:35 nativespace-cdp sshd[116826]: Connection closed by 159.100.136.21 port 46090 [preauth]
Sep 20 12:26:33 nativespace-cdp sshd[118317]: Connection closed by 159.100.136.21 port 55428 [preauth]
Sep 20 12:31:34 nativespace-cdp sshd[119796]: Connection closed by 159.100.136.21 port 35284 [preauth]
Sep 20 12:36:35 nativespace-cdp sshd[121558]: Connection closed by 159.100.136.21 port 44848 [preauth]
Sep 20 12:41:36 nativespace-cdp sshd[122813]: Connection closed by 159.100.136.21 port 53732 [preauth]
Sep 20 12:46:33 nativespace-cdp sshd[124168]: Connection closed by 159.100.136.21 port 34972 [preauth]
Sep 20 12:51:33 nativespace-cdp sshd[125718]: Connection closed by 159.100.136.21 port 44158 [preauth]
Sep 20 12:56:34 nativespace-cdp sshd[126879]: Connection closed by 159.100.136.21 port 53472 [preauth]
Sep 20 13:01:34 nativespace-cdp sshd[128272]: Connection closed by 159.100.136.21 port 34634 [preauth]
Sep 20 13:02:43 nativespace-cdp sshd[128617]: Did not receive identification string from 87.236.176.68 port 60475
Sep 20 13:02:43 nativespace-cdp sshd[128626]: Connection closed by 87.236.176.68 port 58149 [preauth]
Sep 20 13:05:45 nativespace-cdp crond[129402]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129394]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129397]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129396]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129400]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129401]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129404]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129405]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129399]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129392]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129389]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129390]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129403]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129406]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129407]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129393]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129391]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129398]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:05:45 nativespace-cdp crond[129395]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 20 13:06:51 nativespace-cdp sshd[130210]: Did not receive identification string from 159.100.136.21 port 44030
Sep 20 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:09:49 nativespace-cdp sudo[131793]: pam_unix(sudo:session): session closed for user root
Sep 20 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:09:49 nativespace-cdp sudo[131801]: pam_unix(sudo:session): session closed for user root
Sep 20 13:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 13:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:20 nativespace-cdp sudo[131805]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:20 nativespace-cdp sudo[132137]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 13:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:30 nativespace-cdp sudo[132141]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:31 nativespace-cdp sudo[132225]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:31 nativespace-cdp sudo[132231]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:31 nativespace-cdp sudo[132234]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:31 nativespace-cdp sudo[132237]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:31 nativespace-cdp sudo[132240]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 13:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:31 nativespace-cdp sudo[132244]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 13:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:39 nativespace-cdp sudo[132266]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 13:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:44 nativespace-cdp sudo[132272]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=romaldki user-2=branko user-3=hodgsonmail user-4=outdoorc user-5=ranxterc user-6=onlycont user-7=attlebor user-8=lucy user-9=nbhavers user-10=careers user-11=david user-12=mcdermos user-13=chrisdal user-14=jennimil user-15=tomandle user-16=design user-17=kategilpin user-18=ladburyp user-19=stagingerris user-20=dancinggardener user-21=nvihkvu user-22=cath user-23=sketchy user-24=havantho user-25=what user-26=tstardom user-27=oubpgvbx user-28=sosevalu user-29=crrtipdl user-30=bakery user-31=boldover user-32=nove user-33=dhyana user-34=eatspam user-35=darkstar user-36=beauty user-37=nsceres user-38=burydropin user-39=fawcettd user-40=steve user-41=zebrapho user-42=bwppodcast user-43=asandcoc user-44=sibtoncc user-45=courseme user-46=eugincou user-47=hirefootballgame user-48=paulmca1 user-49=pugwash
Sep 20 13:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=cwsocial user-52=ninejimm user-53=reliable user-54=cathski user-55=cambria1 user-56=barbersh user-57=tigerlet user-58=hidden user-59=nomistakes user-60=smrszyqg user-61=isleofwi user-62=philmcph user-63=ctedorgu user-64=donnychicago user-65=firstre5 user-66=steakbridieme user-67=lkpier user-68=health2045 user-69=fortunaz user-70=leftie user-71=foods user-72=nscdp user-73=thqkgnbz user-74=connectedshoppin user-75=ianrayne user-76=accooper user-77=carsinyo user-78=fetch user-79=hubmaster user-80=elecleis user-81=gilpin user-82=milloyco user-83=southlon user-84=highlegh user-85=firstred user-86=costestimatorco user-87=firstrel user-88=clarkass user-89=coursemc user-90=opaiscyx user-91=firstres user-92=jonhartl user-93=seftvta user-94=ultbcrra user-95=nativene user-96=stuartge user-97=askhform user-98=innovat1 user-99=alexadmin user-100=skyfirec user-101=bemadonn user-102=ggaaorgu
Sep 20 13:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=belle user-104=newstoda user-105=bedfords user-106=battlere user-107=oneoarco user-108=firstre2 user-109=vivienn1 user-110=brighto1 user-111=nstriton user-112=leereyn1 user-113=stephani user-114=still user-115=agproduc user-116=hodgesonweb user-117=theblack user-118=spectrum user-119=jarvisin user-120=ulsukarm user-121=maflemin user-122=lbscrmod user-123=connect9 user-124=athenare user-125=vantagep user-126=booff user-127=markward user-128=foundation user-129=magichat user-130=lbhyisi user-131=hhdugcor user-132=ptkxhsbt user-133=dickemery123 user-134=martsblo user-135=musorguk user-136=megacards user-137=wilsonsw user-138=sarafoundation user-139=atestord user-140=strathar user-141=brmrjxl user-142=lakesan1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 13:10:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 13:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:46 nativespace-cdp sudo[132291]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 13:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:47 nativespace-cdp sudo[132347]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MtwBPkOAu47mTdpl.~
Sep 20 13:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:47 nativespace-cdp sudo[132350]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MtwBPkOAu47mTdpl.~'
Sep 20 13:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:47 nativespace-cdp sudo[132353]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-MtwBPkOAu47mTdpl.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 13:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:47 nativespace-cdp sudo[132357]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 13:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:47 nativespace-cdp sudo[132360]: pam_unix(sudo:session): session closed for user root
Sep 20 13:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 13:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 13:10:49 nativespace-cdp sudo[132382]: pam_unix(sudo:session): session closed for user root
Sep 20 13:11:33 nativespace-cdp sshd[132632]: Connection closed by 159.100.136.21 port 53320 [preauth]
Sep 20 13:21:33 nativespace-cdp sshd[137448]: Connection closed by 159.100.136.21 port 44098 [preauth]
Sep 20 13:26:35 nativespace-cdp sshd[139968]: Connection closed by 159.100.136.21 port 53522 [preauth]
Sep 20 13:31:34 nativespace-cdp sshd[142291]: Connection closed by 159.100.136.21 port 34402 [preauth]
Sep 20 13:36:35 nativespace-cdp sshd[145128]: Connection closed by 159.100.136.21 port 43802 [preauth]
Sep 20 13:41:33 nativespace-cdp sshd[146144]: Connection closed by 159.100.136.21 port 52970 [preauth]
Sep 20 13:46:34 nativespace-cdp sshd[147391]: Connection closed by 159.100.136.21 port 33338 [preauth]
Sep 20 13:51:33 nativespace-cdp sshd[149085]: Connection closed by 159.100.136.21 port 42682 [preauth]
Sep 20 13:56:33 nativespace-cdp sshd[150286]: Connection closed by 159.100.136.21 port 52322 [preauth]
Sep 20 14:01:34 nativespace-cdp sshd[151525]: Connection closed by 159.100.136.21 port 60562 [preauth]
Sep 20 14:06:38 nativespace-cdp sshd[153284]: Connection closed by 159.100.136.21 port 42030 [preauth]
Sep 20 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:09:42 nativespace-cdp sudo[153990]: pam_unix(sudo:session): session closed for user root
Sep 20 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:09:42 nativespace-cdp sudo[153995]: pam_unix(sudo:session): session closed for user root
Sep 20 14:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 14:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:09:54 nativespace-cdp sudo[153998]: pam_unix(sudo:session): session closed for user root
Sep 20 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:09:54 nativespace-cdp sudo[154027]: pam_unix(sudo:session): session closed for user root
Sep 20 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:09:59 nativespace-cdp sudo[154030]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:00 nativespace-cdp sudo[154117]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:00 nativespace-cdp sudo[154120]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:00 nativespace-cdp sudo[154123]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:00 nativespace-cdp sudo[154126]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:00 nativespace-cdp sudo[154129]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:00 nativespace-cdp sudo[154132]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:06 nativespace-cdp sudo[154256]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 14:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:13 nativespace-cdp sudo[154265]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=vantagep user-2=connect9 user-3=athenare user-4=lbscrmod user-5=maflemin user-6=markward user-7=booff user-8=foundation user-9=ulsukarm user-10=spectrum user-11=theblack user-12=hodgesonweb user-13=jarvisin user-14=stephani user-15=leereyn1 user-16=agproduc user-17=still user-18=strathar user-19=atestord user-20=sarafoundation user-21=brmrjxl user-22=lakesan1 user-23=megacards user-24=musorguk user-25=wilsonsw user-26=dickemery123 user-27=ptkxhsbt user-28=martsblo user-29=magichat user-30=hhdugcor user-31=lbhyisi user-32=opaiscyx user-33=coursemc user-34=ultbcrra user-35=jonhartl user-36=seftvta user-37=firstres user-38=firstred user-39=highlegh user-40=southlon user-41=clarkass user-42=firstrel user-43=costestimatorco user-44=hubmaster user-45=fetch user-46=carsinyo user-47=milloyco
Sep 20 14:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=gilpin user-49=elecleis user-50=connectedshoppin user-51=thqkgnbz user-52=accooper user-53=ianrayne user-54=vivienn1 user-55=firstre2 user-56=oneoarco user-57=battlere user-58=nstriton user-59=brighto1 user-60=newstoda user-61=ggaaorgu user-62=belle user-63=bemadonn user-64=bedfords user-65=alexadmin user-66=skyfirec user-67=nativene user-68=innovat1 user-69=stuartge user-70=askhform user-71=asandcoc user-72=sibtoncc user-73=steve user-74=bwppodcast user-75=zebrapho user-76=nsceres user-77=fawcettd user-78=burydropin user-79=dhyana user-80=beauty user-81=darkstar user-82=eatspam user-83=lkpier user-84=firstre5 user-85=donnychicago user-86=steakbridieme user-87=philmcph user-88=ctedorgu user-89=nscdp user-90=foods user-91=leftie user-92=fortunaz user-93=health2045 user-94=nomistakes user-95=hidden user-96=tigerlet user-97=barbersh user-98=isleofwi user-99=smrszyqg user-100=cwsocial user-101=pugwash
Sep 20 14:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=howardon user-103=paulmca1 user-104=cathski user-105=cambria1 user-106=ninejimm user-107=reliable user-108=eugincou user-109=courseme user-110=hirefootballgame user-111=jennimil user-112=tomandle user-113=david user-114=careers user-115=nbhavers user-116=chrisdal user-117=mcdermos user-118=onlycont user-119=lucy user-120=attlebor user-121=romaldki user-122=hodgsonmail user-123=ranxterc user-124=outdoorc user-125=branko user-126=boldover user-127=nove user-128=bakery user-129=crrtipdl user-130=sosevalu user-131=havantho user-132=cath user-133=sketchy user-134=nvihkvu user-135=oubpgvbx user-136=tstardom user-137=what user-138=design user-139=stagingerris user-140=dancinggardener user-141=ladburyp user-142=kategilpin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 14:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 14:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:15 nativespace-cdp sudo[154306]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 14:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:16 nativespace-cdp sudo[154313]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gfwxQSqErGIZU0yp.~
Sep 20 14:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:16 nativespace-cdp sudo[154316]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gfwxQSqErGIZU0yp.~'
Sep 20 14:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:16 nativespace-cdp sudo[154319]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gfwxQSqErGIZU0yp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 14:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:16 nativespace-cdp sudo[154324]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 14:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:16 nativespace-cdp sudo[154327]: pam_unix(sudo:session): session closed for user root
Sep 20 14:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 14:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 14:10:29 nativespace-cdp sudo[154370]: pam_unix(sudo:session): session closed for user root
Sep 20 14:11:33 nativespace-cdp sshd[154591]: Connection closed by 159.100.136.21 port 50588 [preauth]
Sep 20 14:13:06 nativespace-cdp sshd[154837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.185.137.78  user=root
Sep 20 14:13:06 nativespace-cdp sshd[154837]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 14:13:08 nativespace-cdp sshd[154837]: Failed password for root from 177.185.137.78 port 39988 ssh2
Sep 20 14:13:08 nativespace-cdp sshd[154837]: Received disconnect from 177.185.137.78 port 39988:11: Bye Bye [preauth]
Sep 20 14:13:08 nativespace-cdp sshd[154837]: Disconnected from 177.185.137.78 port 39988 [preauth]
Sep 20 14:16:33 nativespace-cdp sshd[155664]: Connection closed by 159.100.136.21 port 59824 [preauth]
Sep 20 14:19:01 nativespace-cdp sshd[156579]: Connection closed by 177.185.137.78 port 36284 [preauth]
Sep 20 14:19:48 nativespace-cdp sshd[156702]: Connection closed by 177.185.137.78 port 47638 [preauth]
Sep 20 14:20:33 nativespace-cdp sshd[157001]: Connection closed by 177.185.137.78 port 58988 [preauth]
Sep 20 14:21:14 nativespace-cdp sshd[157106]: Connection closed by 177.185.137.78 port 42116 [preauth]
Sep 20 14:21:33 nativespace-cdp sshd[157163]: Connection closed by 159.100.136.21 port 40646 [preauth]
Sep 20 14:22:37 nativespace-cdp sshd[157377]: Invalid user nextcloud from 177.185.137.78 port 36568
Sep 20 14:22:37 nativespace-cdp sshd[157377]: input_userauth_request: invalid user nextcloud [preauth]
Sep 20 14:22:37 nativespace-cdp sshd[157377]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 14:22:37 nativespace-cdp sshd[157377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.185.137.78
Sep 20 14:22:40 nativespace-cdp sshd[157377]: Failed password for invalid user nextcloud from 177.185.137.78 port 36568 ssh2
Sep 20 14:22:40 nativespace-cdp sshd[157377]: Received disconnect from 177.185.137.78 port 36568:11: Bye Bye [preauth]
Sep 20 14:22:40 nativespace-cdp sshd[157377]: Disconnected from 177.185.137.78 port 36568 [preauth]
Sep 20 14:23:20 nativespace-cdp sshd[157509]: Invalid user koha from 177.185.137.78 port 47900
Sep 20 14:23:20 nativespace-cdp sshd[157509]: input_userauth_request: invalid user koha [preauth]
Sep 20 14:23:20 nativespace-cdp sshd[157509]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 14:23:20 nativespace-cdp sshd[157509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.185.137.78
Sep 20 14:23:22 nativespace-cdp sshd[157509]: Failed password for invalid user koha from 177.185.137.78 port 47900 ssh2
Sep 20 14:23:22 nativespace-cdp sshd[157509]: Received disconnect from 177.185.137.78 port 47900:11: Bye Bye [preauth]
Sep 20 14:23:22 nativespace-cdp sshd[157509]: Disconnected from 177.185.137.78 port 47900 [preauth]
Sep 20 14:26:37 nativespace-cdp sshd[158320]: Connection closed by 159.100.136.21 port 50044 [preauth]
Sep 20 14:31:36 nativespace-cdp sshd[159637]: Connection closed by 159.100.136.21 port 58802 [preauth]
Sep 20 14:36:33 nativespace-cdp sshd[160902]: Connection closed by 159.100.136.21 port 40468 [preauth]
Sep 20 14:41:34 nativespace-cdp sshd[162492]: Connection closed by 159.100.136.21 port 49710 [preauth]
Sep 20 14:46:33 nativespace-cdp sshd[163929]: Connection closed by 159.100.136.21 port 58604 [preauth]
Sep 20 14:51:33 nativespace-cdp sshd[165747]: Connection closed by 159.100.136.21 port 39830 [preauth]
Sep 20 14:56:33 nativespace-cdp sshd[167061]: Connection closed by 159.100.136.21 port 49702 [preauth]
Sep 20 15:01:18 nativespace-cdp sshd[168278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.245.17  user=root
Sep 20 15:01:18 nativespace-cdp sshd[168278]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 15:01:20 nativespace-cdp sshd[168278]: Failed password for root from 165.227.245.17 port 57926 ssh2
Sep 20 15:01:20 nativespace-cdp sshd[168278]: Received disconnect from 165.227.245.17 port 57926:11: Bye Bye [preauth]
Sep 20 15:01:20 nativespace-cdp sshd[168278]: Disconnected from 165.227.245.17 port 57926 [preauth]
Sep 20 15:01:33 nativespace-cdp sshd[168316]: Connection closed by 159.100.136.21 port 58856 [preauth]
Sep 20 15:04:25 nativespace-cdp sshd[169395]: Invalid user reza from 117.2.142.24 port 49712
Sep 20 15:04:25 nativespace-cdp sshd[169395]: input_userauth_request: invalid user reza [preauth]
Sep 20 15:04:25 nativespace-cdp sshd[169395]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:04:25 nativespace-cdp sshd[169395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.2.142.24
Sep 20 15:04:27 nativespace-cdp sshd[169395]: Failed password for invalid user reza from 117.2.142.24 port 49712 ssh2
Sep 20 15:04:28 nativespace-cdp sshd[169395]: Received disconnect from 117.2.142.24 port 49712:11: Bye Bye [preauth]
Sep 20 15:04:28 nativespace-cdp sshd[169395]: Disconnected from 117.2.142.24 port 49712 [preauth]
Sep 20 15:04:33 nativespace-cdp sshd[169416]: Invalid user sysadmin from 20.127.224.153 port 50452
Sep 20 15:04:33 nativespace-cdp sshd[169416]: input_userauth_request: invalid user sysadmin [preauth]
Sep 20 15:04:33 nativespace-cdp sshd[169416]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:04:33 nativespace-cdp sshd[169416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.224.153
Sep 20 15:04:35 nativespace-cdp sshd[169416]: Failed password for invalid user sysadmin from 20.127.224.153 port 50452 ssh2
Sep 20 15:04:35 nativespace-cdp sshd[169416]: Received disconnect from 20.127.224.153 port 50452:11: Bye Bye [preauth]
Sep 20 15:04:35 nativespace-cdp sshd[169416]: Disconnected from 20.127.224.153 port 50452 [preauth]
Sep 20 15:06:36 nativespace-cdp sshd[169967]: Connection closed by 159.100.136.21 port 40082 [preauth]
Sep 20 15:07:36 nativespace-cdp sshd[170303]: Invalid user radix from 165.227.245.17 port 37216
Sep 20 15:07:36 nativespace-cdp sshd[170303]: input_userauth_request: invalid user radix [preauth]
Sep 20 15:07:37 nativespace-cdp sshd[170303]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:07:37 nativespace-cdp sshd[170303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.245.17
Sep 20 15:07:40 nativespace-cdp sshd[170303]: Failed password for invalid user radix from 165.227.245.17 port 37216 ssh2
Sep 20 15:07:41 nativespace-cdp sshd[170303]: Received disconnect from 165.227.245.17 port 37216:11: Bye Bye [preauth]
Sep 20 15:07:41 nativespace-cdp sshd[170303]: Disconnected from 165.227.245.17 port 37216 [preauth]
Sep 20 15:07:54 nativespace-cdp sshd[170357]: Invalid user reza from 20.127.224.153 port 51342
Sep 20 15:07:54 nativespace-cdp sshd[170357]: input_userauth_request: invalid user reza [preauth]
Sep 20 15:07:54 nativespace-cdp sshd[170357]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:07:54 nativespace-cdp sshd[170357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.224.153
Sep 20 15:07:56 nativespace-cdp sshd[170357]: Failed password for invalid user reza from 20.127.224.153 port 51342 ssh2
Sep 20 15:07:56 nativespace-cdp sshd[170357]: Received disconnect from 20.127.224.153 port 51342:11: Bye Bye [preauth]
Sep 20 15:07:56 nativespace-cdp sshd[170357]: Disconnected from 20.127.224.153 port 51342 [preauth]
Sep 20 15:08:16 nativespace-cdp sshd[170426]: Connection reset by 117.2.142.24 port 60598 [preauth]
Sep 20 15:08:16 nativespace-cdp sshd[170442]: Invalid user iptv from 165.227.245.17 port 44088
Sep 20 15:08:16 nativespace-cdp sshd[170442]: input_userauth_request: invalid user iptv [preauth]
Sep 20 15:08:16 nativespace-cdp sshd[170442]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:08:16 nativespace-cdp sshd[170442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.245.17
Sep 20 15:08:19 nativespace-cdp sshd[170442]: Failed password for invalid user iptv from 165.227.245.17 port 44088 ssh2
Sep 20 15:08:19 nativespace-cdp sshd[170442]: Received disconnect from 165.227.245.17 port 44088:11: Bye Bye [preauth]
Sep 20 15:08:19 nativespace-cdp sshd[170442]: Disconnected from 165.227.245.17 port 44088 [preauth]
Sep 20 15:08:36 nativespace-cdp sshd[170508]: Invalid user postgres from 20.127.224.153 port 52162
Sep 20 15:08:36 nativespace-cdp sshd[170508]: input_userauth_request: invalid user postgres [preauth]
Sep 20 15:08:36 nativespace-cdp sshd[170508]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:08:36 nativespace-cdp sshd[170508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.127.224.153
Sep 20 15:08:39 nativespace-cdp sshd[170508]: Failed password for invalid user postgres from 20.127.224.153 port 52162 ssh2
Sep 20 15:08:39 nativespace-cdp sshd[170508]: Received disconnect from 20.127.224.153 port 52162:11: Bye Bye [preauth]
Sep 20 15:08:39 nativespace-cdp sshd[170508]: Disconnected from 20.127.224.153 port 52162 [preauth]
Sep 20 15:09:11 nativespace-cdp sshd[170719]: Invalid user ionadmin from 117.2.142.24 port 47214
Sep 20 15:09:11 nativespace-cdp sshd[170719]: input_userauth_request: invalid user ionadmin [preauth]
Sep 20 15:09:11 nativespace-cdp sshd[170719]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:09:11 nativespace-cdp sshd[170719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.2.142.24
Sep 20 15:09:13 nativespace-cdp sshd[170719]: Failed password for invalid user ionadmin from 117.2.142.24 port 47214 ssh2
Sep 20 15:09:16 nativespace-cdp sshd[170719]: Received disconnect from 117.2.142.24 port 47214:11: Bye Bye [preauth]
Sep 20 15:09:16 nativespace-cdp sshd[170719]: Disconnected from 117.2.142.24 port 47214 [preauth]
Sep 20 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:39 nativespace-cdp sudo[170787]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:39 nativespace-cdp sudo[170790]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 15:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:44 nativespace-cdp sudo[170794]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 15:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:44 nativespace-cdp sudo[170813]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 15:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170816]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170839]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170842]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170845]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170848]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170851]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:49 nativespace-cdp sudo[170854]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 15:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:51 nativespace-cdp sudo[170862]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 15:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:55 nativespace-cdp sudo[170873]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=carsinyo user-3=fetch user-4=gilpin user-5=milloyco user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=opaiscyx user-12=coursemc user-13=jonhartl user-14=seftvta user-15=ultbcrra user-16=firstres user-17=firstred user-18=southlon user-19=highlegh user-20=firstrel user-21=clarkass user-22=costestimatorco user-23=skyfirec user-24=alexadmin user-25=nativene user-26=innovat1 user-27=stuartge user-28=askhform user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=belle user-36=ggaaorgu user-37=newstoda user-38=bemadonn user-39=bedfords user-40=spectrum user-41=hodgesonweb user-42=theblack user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=still user-47=agproduc
Sep 20 15:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=connect9 user-49=athenare user-50=vantagep user-51=maflemin user-52=lbscrmod user-53=markward user-54=booff user-55=foundation user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=strathar user-64=sarafoundation user-65=atestord user-66=lakesan1 user-67=brmrjxl user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=outdoorc user-76=ranxterc user-77=hodgsonmail user-78=branko user-79=jennimil user-80=tomandle user-81=careers user-82=nbhavers user-83=david user-84=chrisdal user-85=mcdermos user-86=cath user-87=sketchy user-88=havantho user-89=nvihkvu user-90=tstardom user-91=oubpgvbx user-92=what user-93=design user-94=ladburyp user-95=dancinggardener user-96=stagingerris user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=sosevalu
Sep 20 15:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=beauty user-108=eatspam user-109=darkstar user-110=sibtoncc user-111=asandcoc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=pugwash user-116=howardon user-117=paulmca1 user-118=cwsocial user-119=cambria1 user-120=cathski user-121=reliable user-122=ninejimm user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=philmcph user-128=ctedorgu user-129=firstre5 user-130=steakbridieme user-131=donnychicago user-132=nscdp user-133=health2045 user-134=fortunaz user-135=leftie user-136=foods user-137=hidden user-138=nomistakes user-139=barbersh user-140=tigerlet user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 15:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 15:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:56 nativespace-cdp sudo[170885]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:57 nativespace-cdp sudo[170891]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iS0GItbWHJ23FaZi.~
Sep 20 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:57 nativespace-cdp sudo[170895]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iS0GItbWHJ23FaZi.~'
Sep 20 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:57 nativespace-cdp sudo[170898]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iS0GItbWHJ23FaZi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:57 nativespace-cdp sudo[170902]: pam_unix(sudo:session): session closed for user root
Sep 20 15:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 15:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:09:57 nativespace-cdp sudo[170905]: pam_unix(sudo:session): session closed for user root
Sep 20 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 15:10:09 nativespace-cdp sudo[171043]: pam_unix(sudo:session): session closed for user root
Sep 20 15:10:10 nativespace-cdp sshd[171018]: Invalid user payara from 117.2.142.24 port 33782
Sep 20 15:10:10 nativespace-cdp sshd[171018]: input_userauth_request: invalid user payara [preauth]
Sep 20 15:10:10 nativespace-cdp sshd[171018]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 15:10:10 nativespace-cdp sshd[171018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.2.142.24
Sep 20 15:10:12 nativespace-cdp sshd[171018]: Failed password for invalid user payara from 117.2.142.24 port 33782 ssh2
Sep 20 15:10:12 nativespace-cdp sshd[171018]: Received disconnect from 117.2.142.24 port 33782:11: Bye Bye [preauth]
Sep 20 15:10:12 nativespace-cdp sshd[171018]: Disconnected from 117.2.142.24 port 33782 [preauth]
Sep 20 15:11:33 nativespace-cdp sshd[171383]: Connection closed by 159.100.136.21 port 48970 [preauth]
Sep 20 15:16:37 nativespace-cdp sshd[172662]: Connection closed by 159.100.136.21 port 58174 [preauth]
Sep 20 15:21:36 nativespace-cdp sshd[174255]: Connection closed by 159.100.136.21 port 38712 [preauth]
Sep 20 15:26:36 nativespace-cdp sshd[175345]: Connection closed by 159.100.136.21 port 48322 [preauth]
Sep 20 15:31:34 nativespace-cdp sshd[176621]: Connection closed by 159.100.136.21 port 56640 [preauth]
Sep 20 15:36:35 nativespace-cdp sshd[177982]: Connection closed by 159.100.136.21 port 37974 [preauth]
Sep 20 15:41:34 nativespace-cdp sshd[179300]: Connection closed by 159.100.136.21 port 46976 [preauth]
Sep 20 15:46:34 nativespace-cdp sshd[180666]: Connection closed by 159.100.136.21 port 56800 [preauth]
Sep 20 15:56:34 nativespace-cdp sshd[183469]: Connection closed by 159.100.136.21 port 47560 [preauth]
Sep 20 16:01:33 nativespace-cdp sshd[184629]: Connection closed by 159.100.136.21 port 57000 [preauth]
Sep 20 16:06:35 nativespace-cdp sshd[186300]: Connection closed by 159.100.136.21 port 38800 [preauth]
Sep 20 16:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 16:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:09:46 nativespace-cdp sudo[187050]: pam_unix(sudo:session): session closed for user root
Sep 20 16:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 16:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:09:47 nativespace-cdp sudo[187057]: pam_unix(sudo:session): session closed for user root
Sep 20 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:09:57 nativespace-cdp sudo[187060]: pam_unix(sudo:session): session closed for user root
Sep 20 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:09:57 nativespace-cdp sudo[187097]: pam_unix(sudo:session): session closed for user root
Sep 20 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:17 nativespace-cdp sudo[187100]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 16:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:17 nativespace-cdp sudo[187290]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 16:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:18 nativespace-cdp sudo[187294]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 16:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:18 nativespace-cdp sudo[187297]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 16:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:18 nativespace-cdp sudo[187300]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 16:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:18 nativespace-cdp sudo[187304]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 16:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:18 nativespace-cdp sudo[187308]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 16:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:23 nativespace-cdp sudo[187336]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 16:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:29 nativespace-cdp sudo[187343]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=fawcettd user-2=burydropin user-3=nsceres user-4=darkstar user-5=eatspam user-6=beauty user-7=dhyana user-8=asandcoc user-9=sibtoncc user-10=zebrapho user-11=bwppodcast user-12=steve user-13=reliable user-14=ninejimm user-15=cathski user-16=cambria1 user-17=cwsocial user-18=paulmca1 user-19=howardon user-20=pugwash user-21=hirefootballgame user-22=courseme user-23=eugincou user-24=leftie user-25=foods user-26=health2045 user-27=fortunaz user-28=nscdp user-29=donnychicago user-30=firstre5 user-31=steakbridieme user-32=philmcph user-33=ctedorgu user-34=lkpier user-35=smrszyqg user-36=isleofwi user-37=barbersh user-38=tigerlet user-39=nomistakes user-40=hidden user-41=lucy user-42=attlebor user-43=onlycont user-44=branko user-45=hodgsonmail user-46=outdoorc user-47=ranxterc user-48=romaldki
Sep 20 16:10:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=mcdermos user-52=chrisdal user-53=david user-54=nbhavers user-55=careers user-56=what user-57=tstardom user-58=oubpgvbx user-59=nvihkvu user-60=havantho user-61=sketchy user-62=cath user-63=kategilpin user-64=stagingerris user-65=dancinggardener user-66=ladburyp user-67=design user-68=nove user-69=boldover user-70=crrtipdl user-71=sosevalu user-72=bakery user-73=jarvisin user-74=theblack user-75=hodgesonweb user-76=spectrum user-77=agproduc user-78=still user-79=leereyn1 user-80=stephani user-81=foundation user-82=markward user-83=booff user-84=lbscrmod user-85=maflemin user-86=vantagep user-87=connect9 user-88=athenare user-89=ulsukarm user-90=martsblo user-91=ptkxhsbt user-92=dickemery123 user-93=hhdugcor user-94=lbhyisi user-95=magichat user-96=lakesan1 user-97=brmrjxl user-98=atestord user-99=sarafoundation user-100=strathar user-101=wilsonsw user-102=megacards
Sep 20 16:10:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=musorguk user-104=elecleis user-105=milloyco user-106=gilpin user-107=fetch user-108=carsinyo user-109=hubmaster user-110=ianrayne user-111=accooper user-112=thqkgnbz user-113=connectedshoppin user-114=firstres user-115=ultbcrra user-116=jonhartl user-117=seftvta user-118=opaiscyx user-119=coursemc user-120=costestimatorco user-121=clarkass user-122=firstrel user-123=highlegh user-124=southlon user-125=firstred user-126=alexadmin user-127=skyfirec user-128=askhform user-129=stuartge user-130=innovat1 user-131=nativene user-132=nstriton user-133=brighto1 user-134=oneoarco user-135=battlere user-136=vivienn1 user-137=firstre2 user-138=bedfords user-139=bemadonn user-140=newstoda user-141=belle user-142=ggaaorgu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 16:10:29 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 16:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:30 nativespace-cdp sudo[187413]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 16:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:31 nativespace-cdp sudo[187423]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8L6Kk7iQbeTZMhrh.~
Sep 20 16:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:31 nativespace-cdp sudo[187427]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8L6Kk7iQbeTZMhrh.~'
Sep 20 16:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:31 nativespace-cdp sudo[187431]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8L6Kk7iQbeTZMhrh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 16:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:31 nativespace-cdp sudo[187435]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 16:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:32 nativespace-cdp sudo[187438]: pam_unix(sudo:session): session closed for user root
Sep 20 16:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 16:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 16:10:41 nativespace-cdp sudo[187489]: pam_unix(sudo:session): session closed for user root
Sep 20 16:11:33 nativespace-cdp sshd[187683]: Connection closed by 159.100.136.21 port 48042 [preauth]
Sep 20 16:16:33 nativespace-cdp sshd[188992]: Connection closed by 159.100.136.21 port 57952 [preauth]
Sep 20 16:21:35 nativespace-cdp sshd[190810]: Connection closed by 159.100.136.21 port 39194 [preauth]
Sep 20 16:26:36 nativespace-cdp sshd[192122]: Connection closed by 159.100.136.21 port 48792 [preauth]
Sep 20 16:31:36 nativespace-cdp sshd[193460]: Connection closed by 159.100.136.21 port 58280 [preauth]
Sep 20 16:36:33 nativespace-cdp sshd[195096]: Connection closed by 159.100.136.21 port 40010 [preauth]
Sep 20 16:41:34 nativespace-cdp sshd[196401]: Connection closed by 159.100.136.21 port 49240 [preauth]
Sep 20 16:46:37 nativespace-cdp sshd[197725]: Connection closed by 159.100.136.21 port 58924 [preauth]
Sep 20 16:51:34 nativespace-cdp sshd[199670]: Connection closed by 159.100.136.21 port 39768 [preauth]
Sep 20 16:56:35 nativespace-cdp sshd[200903]: Connection closed by 159.100.136.21 port 49380 [preauth]
Sep 20 17:01:33 nativespace-cdp sshd[202244]: Connection closed by 159.100.136.21 port 58886 [preauth]
Sep 20 17:06:33 nativespace-cdp sshd[204034]: Connection closed by 159.100.136.21 port 40530 [preauth]
Sep 20 17:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 17:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:35 nativespace-cdp sudo[205051]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 17:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:35 nativespace-cdp sudo[205059]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 17:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:42 nativespace-cdp sudo[205062]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:42 nativespace-cdp sudo[205139]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205145]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205292]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205295]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205298]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205301]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205304]: pam_unix(sudo:session): session closed for user root
Sep 20 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:09:57 nativespace-cdp sudo[205307]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:06 nativespace-cdp sudo[205454]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 17:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:11 nativespace-cdp sudo[205463]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=strathar user-2=sarafoundation user-3=atestord user-4=lakesan1 user-5=brmrjxl user-6=musorguk user-7=megacards user-8=wilsonsw user-9=dickemery123 user-10=ptkxhsbt user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=connect9 user-16=athenare user-17=vantagep user-18=maflemin user-19=lbscrmod user-20=markward user-21=foundation user-22=booff user-23=ulsukarm user-24=spectrum user-25=hodgesonweb user-26=theblack user-27=jarvisin user-28=stephani user-29=leereyn1 user-30=still user-31=agproduc user-32=firstre2 user-33=vivienn1 user-34=battlere user-35=oneoarco user-36=brighto1 user-37=nstriton user-38=ggaaorgu user-39=belle user-40=newstoda user-41=bemadonn user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=innovat1 user-47=askhform user-48=stuartge
Sep 20 17:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=jonhartl user-52=seftvta user-53=ultbcrra user-54=firstres user-55=firstred user-56=southlon user-57=highlegh user-58=clarkass user-59=firstrel user-60=costestimatorco user-61=hubmaster user-62=carsinyo user-63=fetch user-64=milloyco user-65=gilpin user-66=elecleis user-67=connectedshoppin user-68=thqkgnbz user-69=accooper user-70=ianrayne user-71=lkpier user-72=ctedorgu user-73=philmcph user-74=donnychicago user-75=firstre5 user-76=steakbridieme user-77=nscdp user-78=health2045 user-79=fortunaz user-80=foods user-81=leftie user-82=hidden user-83=nomistakes user-84=barbersh user-85=tigerlet user-86=isleofwi user-87=smrszyqg user-88=paulmca1 user-89=howardon user-90=pugwash user-91=cwsocial user-92=cambria1 user-93=cathski user-94=reliable user-95=ninejimm user-96=eugincou user-97=courseme user-98=hirefootballgame user-99=asandcoc user-100=sibtoncc user-101=steve
Sep 20 17:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=zebrapho user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=beauty user-109=eatspam user-110=darkstar user-111=boldover user-112=nove user-113=bakery user-114=sosevalu user-115=crrtipdl user-116=sketchy user-117=cath user-118=havantho user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=design user-124=ladburyp user-125=dancinggardener user-126=stagingerris user-127=kategilpin user-128=jennimil user-129=tomandle user-130=nbhavers user-131=careers user-132=david user-133=chrisdal user-134=mcdermos user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=hodgsonmail user-140=outdoorc user-141=ranxterc user-142=branko feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 17:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:13 nativespace-cdp sudo[205498]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 17:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:13 nativespace-cdp sudo[205520]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FVkcNnWl7kt59wQo.~
Sep 20 17:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:14 nativespace-cdp sudo[205527]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FVkcNnWl7kt59wQo.~'
Sep 20 17:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:14 nativespace-cdp sudo[205530]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-FVkcNnWl7kt59wQo.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 17:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:14 nativespace-cdp sudo[205534]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 17:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:14 nativespace-cdp sudo[205538]: pam_unix(sudo:session): session closed for user root
Sep 20 17:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 17:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 17:10:18 nativespace-cdp sudo[205615]: pam_unix(sudo:session): session closed for user root
Sep 20 17:11:36 nativespace-cdp sshd[206007]: Connection closed by 159.100.136.21 port 50034 [preauth]
Sep 20 17:16:33 nativespace-cdp sshd[207131]: Connection closed by 159.100.136.21 port 59544 [preauth]
Sep 20 17:21:34 nativespace-cdp sshd[208494]: Connection closed by 159.100.136.21 port 40596 [preauth]
Sep 20 17:26:34 nativespace-cdp sshd[209785]: Connection closed by 159.100.136.21 port 50468 [preauth]
Sep 20 17:31:34 nativespace-cdp sshd[210921]: Connection closed by 159.100.136.21 port 59598 [preauth]
Sep 20 17:34:29 nativespace-cdp sshd[211842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.80.132  user=root
Sep 20 17:34:29 nativespace-cdp sshd[211842]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 17:34:32 nativespace-cdp sshd[211842]: Failed password for root from 68.183.80.132 port 50594 ssh2
Sep 20 17:34:32 nativespace-cdp sshd[211842]: Received disconnect from 68.183.80.132 port 50594:11: Bye Bye [preauth]
Sep 20 17:34:32 nativespace-cdp sshd[211842]: Disconnected from 68.183.80.132 port 50594 [preauth]
Sep 20 17:36:15 nativespace-cdp sshd[212422]: Invalid user administrator from 68.183.80.132 port 55436
Sep 20 17:36:15 nativespace-cdp sshd[212422]: input_userauth_request: invalid user administrator [preauth]
Sep 20 17:36:15 nativespace-cdp sshd[212422]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 17:36:15 nativespace-cdp sshd[212422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.80.132
Sep 20 17:36:16 nativespace-cdp sshd[212422]: Failed password for invalid user administrator from 68.183.80.132 port 55436 ssh2
Sep 20 17:36:20 nativespace-cdp sshd[212422]: Received disconnect from 68.183.80.132 port 55436:11: Bye Bye [preauth]
Sep 20 17:36:20 nativespace-cdp sshd[212422]: Disconnected from 68.183.80.132 port 55436 [preauth]
Sep 20 17:36:36 nativespace-cdp sshd[212479]: Connection closed by 159.100.136.21 port 41192 [preauth]
Sep 20 17:37:00 nativespace-cdp sshd[212558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.80.132  user=root
Sep 20 17:37:00 nativespace-cdp sshd[212558]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 17:37:02 nativespace-cdp sshd[212558]: Failed password for root from 68.183.80.132 port 38058 ssh2
Sep 20 17:37:02 nativespace-cdp sshd[212558]: Received disconnect from 68.183.80.132 port 38058:11: Bye Bye [preauth]
Sep 20 17:37:02 nativespace-cdp sshd[212558]: Disconnected from 68.183.80.132 port 38058 [preauth]
Sep 20 17:41:35 nativespace-cdp sshd[213640]: Connection closed by 159.100.136.21 port 49692 [preauth]
Sep 20 17:46:33 nativespace-cdp sshd[215088]: Connection closed by 159.100.136.21 port 59336 [preauth]
Sep 20 17:51:34 nativespace-cdp sshd[216623]: Connection closed by 159.100.136.21 port 40588 [preauth]
Sep 20 17:56:34 nativespace-cdp sshd[217653]: Connection closed by 159.100.136.21 port 49734 [preauth]
Sep 20 18:01:35 nativespace-cdp sshd[218898]: Connection closed by 159.100.136.21 port 58946 [preauth]
Sep 20 18:06:33 nativespace-cdp sshd[220374]: Connection closed by 159.100.136.21 port 40442 [preauth]
Sep 20 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:40 nativespace-cdp sudo[221155]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:40 nativespace-cdp sudo[221159]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:42 nativespace-cdp sudo[221162]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 18:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:42 nativespace-cdp sudo[221177]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 18:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221180]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221194]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221197]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221200]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221203]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221206]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:46 nativespace-cdp sudo[221209]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:54 nativespace-cdp sudo[221231]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:09:59 nativespace-cdp sudo[221245]: pam_unix(sudo:session): session closed for user root
Sep 20 18:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sketchy user-2=cath user-3=havantho user-4=nvihkvu user-5=oubpgvbx user-6=tstardom user-7=what user-8=design user-9=ladburyp user-10=stagingerris user-11=dancinggardener user-12=kategilpin user-13=boldover user-14=nove user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=onlycont user-19=attlebor user-20=lucy user-21=romaldki user-22=hodgsonmail user-23=ranxterc user-24=outdoorc user-25=branko user-26=jennimil user-27=tomandle user-28=careers user-29=nbhavers user-30=david user-31=chrisdal user-32=mcdermos user-33=howardon user-34=paulmca1 user-35=pugwash user-36=cwsocial user-37=cathski user-38=cambria1 user-39=reliable user-40=ninejimm user-41=eugincou user-42=courseme user-43=hirefootballgame user-44=lkpier user-45=ctedorgu user-46=philmcph user-47=steakbridieme user-48=firstre5
Sep 20 18:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=donnychicago user-50=nscdp user-51=health2045 user-52=fortunaz user-53=leftie user-54=foods user-55=hidden user-56=nomistakes user-57=tigerlet user-58=barbersh user-59=smrszyqg user-60=isleofwi user-61=nsceres user-62=burydropin user-63=fawcettd user-64=dhyana user-65=beauty user-66=eatspam user-67=darkstar user-68=sibtoncc user-69=asandcoc user-70=steve user-71=bwppodcast user-72=zebrapho user-73=skyfirec user-74=alexadmin user-75=nativene user-76=innovat1 user-77=stuartge user-78=askhform user-79=firstre2 user-80=vivienn1 user-81=battlere user-82=oneoarco user-83=brighto1 user-84=nstriton user-85=ggaaorgu user-86=belle user-87=newstoda user-88=bemadonn user-89=bedfords user-90=hubmaster user-91=carsinyo user-92=fetch user-93=gilpin user-94=milloyco user-95=elecleis user-96=connectedshoppin user-97=thqkgnbz user-98=accooper user-99=ianrayne user-100=opaiscyx user-101=coursemc user-102=jonhartl
Sep 20 18:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=seftvta user-104=ultbcrra user-105=firstres user-106=firstred user-107=southlon user-108=highlegh user-109=firstrel user-110=clarkass user-111=costestimatorco user-112=dickemery123 user-113=ptkxhsbt user-114=martsblo user-115=magichat user-116=lbhyisi user-117=hhdugcor user-118=strathar user-119=sarafoundation user-120=atestord user-121=lakesan1 user-122=brmrjxl user-123=musorguk user-124=megacards user-125=wilsonsw user-126=spectrum user-127=theblack user-128=hodgesonweb user-129=jarvisin user-130=stephani user-131=leereyn1 user-132=still user-133=agproduc user-134=athenare user-135=connect9 user-136=vantagep user-137=maflemin user-138=lbscrmod user-139=booff user-140=markward user-141=foundation user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 18:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 18:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:01 nativespace-cdp sudo[221258]: pam_unix(sudo:session): session closed for user root
Sep 20 18:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 18:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:01 nativespace-cdp sudo[221269]: pam_unix(sudo:session): session closed for user root
Sep 20 18:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Wv1YcQirfFLDVR3G.~
Sep 20 18:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:01 nativespace-cdp sudo[221273]: pam_unix(sudo:session): session closed for user root
Sep 20 18:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Wv1YcQirfFLDVR3G.~'
Sep 20 18:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:01 nativespace-cdp sudo[221297]: pam_unix(sudo:session): session closed for user root
Sep 20 18:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Wv1YcQirfFLDVR3G.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 18:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:02 nativespace-cdp sudo[221349]: pam_unix(sudo:session): session closed for user root
Sep 20 18:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 18:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:02 nativespace-cdp sudo[221357]: pam_unix(sudo:session): session closed for user root
Sep 20 18:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 18:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 18:10:30 nativespace-cdp sudo[221610]: pam_unix(sudo:session): session closed for user root
Sep 20 18:11:34 nativespace-cdp sshd[221793]: Connection closed by 159.100.136.21 port 48426 [preauth]
Sep 20 18:12:08 nativespace-cdp sshd[221934]: Invalid user user from 92.246.84.15 port 57054
Sep 20 18:12:08 nativespace-cdp sshd[221934]: input_userauth_request: invalid user user [preauth]
Sep 20 18:12:08 nativespace-cdp sshd[221934]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:12:08 nativespace-cdp sshd[221934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15
Sep 20 18:12:10 nativespace-cdp sshd[221934]: Failed password for invalid user user from 92.246.84.15 port 57054 ssh2
Sep 20 18:12:10 nativespace-cdp sshd[221934]: Received disconnect from 92.246.84.15 port 57054:11: Bye Bye [preauth]
Sep 20 18:12:10 nativespace-cdp sshd[221934]: Disconnected from 92.246.84.15 port 57054 [preauth]
Sep 20 18:12:11 nativespace-cdp sshd[221946]: Invalid user ubuntu from 23.158.56.124 port 55472
Sep 20 18:12:11 nativespace-cdp sshd[221946]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:12:11 nativespace-cdp sshd[221946]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:12:11 nativespace-cdp sshd[221946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.124
Sep 20 18:12:13 nativespace-cdp sshd[221946]: Failed password for invalid user ubuntu from 23.158.56.124 port 55472 ssh2
Sep 20 18:12:17 nativespace-cdp sshd[221946]: Received disconnect from 23.158.56.124 port 55472:11: Bye Bye [preauth]
Sep 20 18:12:17 nativespace-cdp sshd[221946]: Disconnected from 23.158.56.124 port 55472 [preauth]
Sep 20 18:12:18 nativespace-cdp sshd[221968]: Invalid user ubuntu from 45.175.75.60 port 39292
Sep 20 18:12:18 nativespace-cdp sshd[221968]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:12:18 nativespace-cdp sshd[221968]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:12:18 nativespace-cdp sshd[221968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.175.75.60
Sep 20 18:12:20 nativespace-cdp sshd[221968]: Failed password for invalid user ubuntu from 45.175.75.60 port 39292 ssh2
Sep 20 18:12:20 nativespace-cdp sshd[221968]: Received disconnect from 45.175.75.60 port 39292:11: Bye Bye [preauth]
Sep 20 18:12:20 nativespace-cdp sshd[221968]: Disconnected from 45.175.75.60 port 39292 [preauth]
Sep 20 18:12:46 nativespace-cdp sshd[222039]: Invalid user username from 165.154.187.12 port 42036
Sep 20 18:12:46 nativespace-cdp sshd[222039]: input_userauth_request: invalid user username [preauth]
Sep 20 18:12:46 nativespace-cdp sshd[222039]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:12:46 nativespace-cdp sshd[222039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.187.12
Sep 20 18:12:48 nativespace-cdp sshd[222039]: Failed password for invalid user username from 165.154.187.12 port 42036 ssh2
Sep 20 18:12:48 nativespace-cdp sshd[222039]: Received disconnect from 165.154.187.12 port 42036:11: Bye Bye [preauth]
Sep 20 18:12:48 nativespace-cdp sshd[222039]: Disconnected from 165.154.187.12 port 42036 [preauth]
Sep 20 18:13:17 nativespace-cdp sshd[222153]: Invalid user tomcat from 83.235.16.111 port 38238
Sep 20 18:13:17 nativespace-cdp sshd[222153]: input_userauth_request: invalid user tomcat [preauth]
Sep 20 18:13:17 nativespace-cdp sshd[222153]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:13:17 nativespace-cdp sshd[222153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.235.16.111
Sep 20 18:13:19 nativespace-cdp sshd[222153]: Failed password for invalid user tomcat from 83.235.16.111 port 38238 ssh2
Sep 20 18:13:19 nativespace-cdp sshd[222153]: Received disconnect from 83.235.16.111 port 38238:11: Bye Bye [preauth]
Sep 20 18:13:19 nativespace-cdp sshd[222153]: Disconnected from 83.235.16.111 port 38238 [preauth]
Sep 20 18:15:22 nativespace-cdp sshd[222761]: Invalid user test from 181.28.101.14 port 52386
Sep 20 18:15:22 nativespace-cdp sshd[222761]: input_userauth_request: invalid user test [preauth]
Sep 20 18:15:23 nativespace-cdp sshd[222761]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:15:23 nativespace-cdp sshd[222761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.28.101.14
Sep 20 18:15:25 nativespace-cdp sshd[222761]: Failed password for invalid user test from 181.28.101.14 port 52386 ssh2
Sep 20 18:15:27 nativespace-cdp sshd[222761]: Received disconnect from 181.28.101.14 port 52386:11: Bye Bye [preauth]
Sep 20 18:15:27 nativespace-cdp sshd[222761]: Disconnected from 181.28.101.14 port 52386 [preauth]
Sep 20 18:16:34 nativespace-cdp sshd[223008]: Connection closed by 159.100.136.21 port 57808 [preauth]
Sep 20 18:17:03 nativespace-cdp sshd[223092]: Invalid user tg from 182.93.7.194 port 49866
Sep 20 18:17:03 nativespace-cdp sshd[223092]: input_userauth_request: invalid user tg [preauth]
Sep 20 18:17:03 nativespace-cdp sshd[223092]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:17:03 nativespace-cdp sshd[223092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 20 18:17:04 nativespace-cdp sshd[223092]: Failed password for invalid user tg from 182.93.7.194 port 49866 ssh2
Sep 20 18:17:07 nativespace-cdp sshd[223092]: Received disconnect from 182.93.7.194 port 49866:11: Bye Bye [preauth]
Sep 20 18:17:07 nativespace-cdp sshd[223092]: Disconnected from 182.93.7.194 port 49866 [preauth]
Sep 20 18:17:29 nativespace-cdp sshd[223170]: Invalid user abhishek from 42.96.47.163 port 35032
Sep 20 18:17:29 nativespace-cdp sshd[223170]: input_userauth_request: invalid user abhishek [preauth]
Sep 20 18:17:29 nativespace-cdp sshd[223170]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:17:29 nativespace-cdp sshd[223170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.47.163
Sep 20 18:17:31 nativespace-cdp sshd[223170]: Failed password for invalid user abhishek from 42.96.47.163 port 35032 ssh2
Sep 20 18:17:31 nativespace-cdp sshd[223170]: Received disconnect from 42.96.47.163 port 35032:11: Bye Bye [preauth]
Sep 20 18:17:31 nativespace-cdp sshd[223170]: Disconnected from 42.96.47.163 port 35032 [preauth]
Sep 20 18:17:49 nativespace-cdp sshd[223493]: Invalid user username from 68.183.136.88 port 48292
Sep 20 18:17:49 nativespace-cdp sshd[223493]: input_userauth_request: invalid user username [preauth]
Sep 20 18:17:49 nativespace-cdp sshd[223493]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:17:49 nativespace-cdp sshd[223493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.136.88
Sep 20 18:17:50 nativespace-cdp sshd[223497]: Invalid user ubuntu from 161.132.180.115 port 3559
Sep 20 18:17:50 nativespace-cdp sshd[223497]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:17:50 nativespace-cdp sshd[223497]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:17:50 nativespace-cdp sshd[223497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.180.115
Sep 20 18:17:51 nativespace-cdp sshd[223493]: Failed password for invalid user username from 68.183.136.88 port 48292 ssh2
Sep 20 18:17:51 nativespace-cdp sshd[223493]: Received disconnect from 68.183.136.88 port 48292:11: Bye Bye [preauth]
Sep 20 18:17:51 nativespace-cdp sshd[223493]: Disconnected from 68.183.136.88 port 48292 [preauth]
Sep 20 18:17:52 nativespace-cdp sshd[223497]: Failed password for invalid user ubuntu from 161.132.180.115 port 3559 ssh2
Sep 20 18:17:52 nativespace-cdp sshd[223497]: Received disconnect from 161.132.180.115 port 3559:11: Bye Bye [preauth]
Sep 20 18:17:52 nativespace-cdp sshd[223497]: Disconnected from 161.132.180.115 port 3559 [preauth]
Sep 20 18:18:12 nativespace-cdp sshd[223729]: Invalid user user from 92.246.84.15 port 41062
Sep 20 18:18:12 nativespace-cdp sshd[223729]: input_userauth_request: invalid user user [preauth]
Sep 20 18:18:12 nativespace-cdp sshd[223729]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:18:12 nativespace-cdp sshd[223729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15
Sep 20 18:18:14 nativespace-cdp sshd[223729]: Failed password for invalid user user from 92.246.84.15 port 41062 ssh2
Sep 20 18:18:14 nativespace-cdp sshd[223729]: Received disconnect from 92.246.84.15 port 41062:11: Bye Bye [preauth]
Sep 20 18:18:14 nativespace-cdp sshd[223729]: Disconnected from 92.246.84.15 port 41062 [preauth]
Sep 20 18:18:21 nativespace-cdp sshd[223759]: Invalid user ubuntu from 83.235.16.111 port 59412
Sep 20 18:18:21 nativespace-cdp sshd[223759]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:18:21 nativespace-cdp sshd[223759]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:18:21 nativespace-cdp sshd[223759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.235.16.111
Sep 20 18:18:23 nativespace-cdp sshd[223759]: Failed password for invalid user ubuntu from 83.235.16.111 port 59412 ssh2
Sep 20 18:18:23 nativespace-cdp sshd[223759]: Received disconnect from 83.235.16.111 port 59412:11: Bye Bye [preauth]
Sep 20 18:18:23 nativespace-cdp sshd[223759]: Disconnected from 83.235.16.111 port 59412 [preauth]
Sep 20 18:18:33 nativespace-cdp sshd[223784]: Invalid user test_user from 68.183.136.88 port 51802
Sep 20 18:18:33 nativespace-cdp sshd[223784]: input_userauth_request: invalid user test_user [preauth]
Sep 20 18:18:33 nativespace-cdp sshd[223784]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:18:33 nativespace-cdp sshd[223784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.136.88
Sep 20 18:18:35 nativespace-cdp sshd[223784]: Failed password for invalid user test_user from 68.183.136.88 port 51802 ssh2
Sep 20 18:18:35 nativespace-cdp sshd[223784]: Received disconnect from 68.183.136.88 port 51802:11: Bye Bye [preauth]
Sep 20 18:18:35 nativespace-cdp sshd[223784]: Disconnected from 68.183.136.88 port 51802 [preauth]
Sep 20 18:18:53 nativespace-cdp sshd[223846]: Invalid user test from 181.28.101.14 port 55620
Sep 20 18:18:53 nativespace-cdp sshd[223846]: input_userauth_request: invalid user test [preauth]
Sep 20 18:18:53 nativespace-cdp sshd[223846]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:18:53 nativespace-cdp sshd[223846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.28.101.14
Sep 20 18:18:54 nativespace-cdp sshd[223851]: Invalid user student5 from 92.246.84.15 port 41046
Sep 20 18:18:54 nativespace-cdp sshd[223851]: input_userauth_request: invalid user student5 [preauth]
Sep 20 18:18:54 nativespace-cdp sshd[223851]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:18:54 nativespace-cdp sshd[223851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15
Sep 20 18:18:55 nativespace-cdp sshd[223846]: Failed password for invalid user test from 181.28.101.14 port 55620 ssh2
Sep 20 18:18:56 nativespace-cdp sshd[223851]: Failed password for invalid user student5 from 92.246.84.15 port 41046 ssh2
Sep 20 18:18:58 nativespace-cdp sshd[223846]: Received disconnect from 181.28.101.14 port 55620:11: Bye Bye [preauth]
Sep 20 18:18:58 nativespace-cdp sshd[223846]: Disconnected from 181.28.101.14 port 55620 [preauth]
Sep 20 18:18:58 nativespace-cdp sshd[223851]: Received disconnect from 92.246.84.15 port 41046:11: Bye Bye [preauth]
Sep 20 18:18:58 nativespace-cdp sshd[223851]: Disconnected from 92.246.84.15 port 41046 [preauth]
Sep 20 18:19:03 nativespace-cdp sshd[223901]: Invalid user steam from 83.235.16.111 port 43722
Sep 20 18:19:03 nativespace-cdp sshd[223901]: input_userauth_request: invalid user steam [preauth]
Sep 20 18:19:03 nativespace-cdp sshd[223901]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:19:03 nativespace-cdp sshd[223901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.235.16.111
Sep 20 18:19:05 nativespace-cdp sshd[223901]: Failed password for invalid user steam from 83.235.16.111 port 43722 ssh2
Sep 20 18:19:05 nativespace-cdp sshd[223901]: Received disconnect from 83.235.16.111 port 43722:11: Bye Bye [preauth]
Sep 20 18:19:05 nativespace-cdp sshd[223901]: Disconnected from 83.235.16.111 port 43722 [preauth]
Sep 20 18:19:13 nativespace-cdp sshd[223951]: Invalid user test01 from 161.132.180.115 port 3560
Sep 20 18:19:13 nativespace-cdp sshd[223951]: input_userauth_request: invalid user test01 [preauth]
Sep 20 18:19:13 nativespace-cdp sshd[223951]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:19:13 nativespace-cdp sshd[223951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.180.115
Sep 20 18:19:16 nativespace-cdp sshd[223951]: Failed password for invalid user test01 from 161.132.180.115 port 3560 ssh2
Sep 20 18:19:19 nativespace-cdp sshd[223967]: Invalid user testuser from 68.183.136.88 port 39320
Sep 20 18:19:19 nativespace-cdp sshd[223967]: input_userauth_request: invalid user testuser [preauth]
Sep 20 18:19:19 nativespace-cdp sshd[223967]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:19:19 nativespace-cdp sshd[223967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.136.88
Sep 20 18:19:21 nativespace-cdp sshd[223967]: Failed password for invalid user testuser from 68.183.136.88 port 39320 ssh2
Sep 20 18:19:23 nativespace-cdp sshd[223951]: Received disconnect from 161.132.180.115 port 3560:11: Bye Bye [preauth]
Sep 20 18:19:23 nativespace-cdp sshd[223951]: Disconnected from 161.132.180.115 port 3560 [preauth]
Sep 20 18:19:47 nativespace-cdp sshd[224053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.28.101.14  user=root
Sep 20 18:19:47 nativespace-cdp sshd[224053]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 18:19:49 nativespace-cdp sshd[224053]: Failed password for root from 181.28.101.14 port 60028 ssh2
Sep 20 18:19:51 nativespace-cdp sshd[224053]: Received disconnect from 181.28.101.14 port 60028:11: Bye Bye [preauth]
Sep 20 18:19:51 nativespace-cdp sshd[224053]: Disconnected from 181.28.101.14 port 60028 [preauth]
Sep 20 18:19:59 nativespace-cdp sshd[224115]: Invalid user sopuser from 161.132.180.115 port 3561
Sep 20 18:19:59 nativespace-cdp sshd[224115]: input_userauth_request: invalid user sopuser [preauth]
Sep 20 18:19:59 nativespace-cdp sshd[224115]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:19:59 nativespace-cdp sshd[224115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.132.180.115
Sep 20 18:20:00 nativespace-cdp sshd[224115]: Failed password for invalid user sopuser from 161.132.180.115 port 3561 ssh2
Sep 20 18:20:16 nativespace-cdp sshd[224408]: Invalid user test from 42.96.47.163 port 48154
Sep 20 18:20:16 nativespace-cdp sshd[224408]: input_userauth_request: invalid user test [preauth]
Sep 20 18:20:16 nativespace-cdp sshd[224408]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:20:16 nativespace-cdp sshd[224408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.47.163
Sep 20 18:20:18 nativespace-cdp sshd[224408]: Failed password for invalid user test from 42.96.47.163 port 48154 ssh2
Sep 20 18:20:20 nativespace-cdp sshd[224408]: Received disconnect from 42.96.47.163 port 48154:11: Bye Bye [preauth]
Sep 20 18:20:20 nativespace-cdp sshd[224408]: Disconnected from 42.96.47.163 port 48154 [preauth]
Sep 20 18:20:37 nativespace-cdp sshd[224519]: Invalid user student3 from 23.158.56.124 port 58660
Sep 20 18:20:37 nativespace-cdp sshd[224519]: input_userauth_request: invalid user student3 [preauth]
Sep 20 18:20:37 nativespace-cdp sshd[224519]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:20:37 nativespace-cdp sshd[224519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.124
Sep 20 18:20:40 nativespace-cdp sshd[224519]: Failed password for invalid user student3 from 23.158.56.124 port 58660 ssh2
Sep 20 18:20:41 nativespace-cdp sshd[224519]: Received disconnect from 23.158.56.124 port 58660:11: Bye Bye [preauth]
Sep 20 18:20:41 nativespace-cdp sshd[224519]: Disconnected from 23.158.56.124 port 58660 [preauth]
Sep 20 18:21:14 nativespace-cdp sshd[224610]: Invalid user sopuser from 42.96.47.163 port 35748
Sep 20 18:21:14 nativespace-cdp sshd[224610]: input_userauth_request: invalid user sopuser [preauth]
Sep 20 18:21:14 nativespace-cdp sshd[224610]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:21:14 nativespace-cdp sshd[224610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.96.47.163
Sep 20 18:21:16 nativespace-cdp sshd[224610]: Failed password for invalid user sopuser from 42.96.47.163 port 35748 ssh2
Sep 20 18:21:22 nativespace-cdp sshd[224669]: Invalid user ubuntu from 23.158.56.124 port 43056
Sep 20 18:21:22 nativespace-cdp sshd[224669]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:21:22 nativespace-cdp sshd[224669]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:21:22 nativespace-cdp sshd[224669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.158.56.124
Sep 20 18:21:24 nativespace-cdp sshd[224669]: Failed password for invalid user ubuntu from 23.158.56.124 port 43056 ssh2
Sep 20 18:21:26 nativespace-cdp sshd[224669]: Received disconnect from 23.158.56.124 port 43056:11: Bye Bye [preauth]
Sep 20 18:21:26 nativespace-cdp sshd[224669]: Disconnected from 23.158.56.124 port 43056 [preauth]
Sep 20 18:21:33 nativespace-cdp sshd[224721]: Connection closed by 159.100.136.21 port 37666 [preauth]
Sep 20 18:26:17 nativespace-cdp sshd[225719]: Invalid user ubuntu from 182.93.7.194 port 48258
Sep 20 18:26:17 nativespace-cdp sshd[225719]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:26:17 nativespace-cdp sshd[225719]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:26:17 nativespace-cdp sshd[225719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 20 18:26:20 nativespace-cdp sshd[225719]: Failed password for invalid user ubuntu from 182.93.7.194 port 48258 ssh2
Sep 20 18:26:23 nativespace-cdp sshd[225719]: Received disconnect from 182.93.7.194 port 48258:11: Bye Bye [preauth]
Sep 20 18:26:23 nativespace-cdp sshd[225719]: Disconnected from 182.93.7.194 port 48258 [preauth]
Sep 20 18:26:37 nativespace-cdp sshd[225765]: Connection closed by 159.100.136.21 port 47054 [preauth]
Sep 20 18:27:27 nativespace-cdp sshd[225883]: Invalid user ubuntu from 182.93.7.194 port 44762
Sep 20 18:27:27 nativespace-cdp sshd[225883]: input_userauth_request: invalid user ubuntu [preauth]
Sep 20 18:27:27 nativespace-cdp sshd[225883]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:27:27 nativespace-cdp sshd[225883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 20 18:27:29 nativespace-cdp sshd[225883]: Failed password for invalid user ubuntu from 182.93.7.194 port 44762 ssh2
Sep 20 18:27:29 nativespace-cdp sshd[225883]: Received disconnect from 182.93.7.194 port 44762:11: Bye Bye [preauth]
Sep 20 18:27:29 nativespace-cdp sshd[225883]: Disconnected from 182.93.7.194 port 44762 [preauth]
Sep 20 18:31:33 nativespace-cdp sshd[226865]: Connection closed by 159.100.136.21 port 55604 [preauth]
Sep 20 18:36:37 nativespace-cdp sshd[228229]: Connection closed by 159.100.136.21 port 36502 [preauth]
Sep 20 18:41:19 nativespace-cdp sshd[229243]: Invalid user test from 165.154.187.12 port 56588
Sep 20 18:41:19 nativespace-cdp sshd[229243]: input_userauth_request: invalid user test [preauth]
Sep 20 18:41:19 nativespace-cdp sshd[229243]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:41:19 nativespace-cdp sshd[229243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.187.12
Sep 20 18:41:21 nativespace-cdp sshd[229243]: Failed password for invalid user test from 165.154.187.12 port 56588 ssh2
Sep 20 18:41:23 nativespace-cdp sshd[229243]: Received disconnect from 165.154.187.12 port 56588:11: Bye Bye [preauth]
Sep 20 18:41:23 nativespace-cdp sshd[229243]: Disconnected from 165.154.187.12 port 56588 [preauth]
Sep 20 18:41:33 nativespace-cdp sshd[229317]: Connection closed by 159.100.136.21 port 45268 [preauth]
Sep 20 18:45:35 nativespace-cdp sshd[230266]: Invalid user q from 165.154.187.12 port 51692
Sep 20 18:45:35 nativespace-cdp sshd[230266]: input_userauth_request: invalid user q [preauth]
Sep 20 18:45:35 nativespace-cdp sshd[230266]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 18:45:35 nativespace-cdp sshd[230266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.187.12
Sep 20 18:45:37 nativespace-cdp sshd[230266]: Failed password for invalid user q from 165.154.187.12 port 51692 ssh2
Sep 20 18:45:37 nativespace-cdp sshd[230266]: Received disconnect from 165.154.187.12 port 51692:11: Bye Bye [preauth]
Sep 20 18:45:37 nativespace-cdp sshd[230266]: Disconnected from 165.154.187.12 port 51692 [preauth]
Sep 20 18:46:27 nativespace-cdp sshd[230461]: Bad protocol version identification '\003' from 91.238.181.34 port 65313
Sep 20 18:46:33 nativespace-cdp sshd[230478]: Connection closed by 159.100.136.21 port 53794 [preauth]
Sep 20 18:51:39 nativespace-cdp sshd[232084]: Connection closed by 159.100.136.21 port 35056 [preauth]
Sep 20 18:56:36 nativespace-cdp sshd[233232]: Connection closed by 159.100.136.21 port 44038 [preauth]
Sep 20 19:01:34 nativespace-cdp sshd[234547]: Connection closed by 159.100.136.21 port 53266 [preauth]
Sep 20 19:06:36 nativespace-cdp sshd[236219]: Connection closed by 159.100.136.21 port 34654 [preauth]
Sep 20 19:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 19:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:30 nativespace-cdp sudo[236782]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:31 nativespace-cdp sudo[236785]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 19:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:33 nativespace-cdp sudo[236788]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:33 nativespace-cdp sudo[236795]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 19:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:37 nativespace-cdp sudo[236798]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:37 nativespace-cdp sudo[236813]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:37 nativespace-cdp sudo[236817]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:37 nativespace-cdp sudo[236820]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:37 nativespace-cdp sudo[236824]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:37 nativespace-cdp sudo[236827]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:38 nativespace-cdp sudo[236831]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:41 nativespace-cdp sudo[236852]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:46 nativespace-cdp sudo[236859]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lbhyisi user-2=hhdugcor user-3=magichat user-4=martsblo user-5=dickemery123 user-6=ptkxhsbt user-7=wilsonsw user-8=musorguk user-9=megacards user-10=lakesan1 user-11=brmrjxl user-12=strathar user-13=sarafoundation user-14=atestord user-15=still user-16=agproduc user-17=stephani user-18=leereyn1 user-19=jarvisin user-20=spectrum user-21=theblack user-22=hodgesonweb user-23=ulsukarm user-24=booff user-25=markward user-26=foundation user-27=athenare user-28=connect9 user-29=vantagep user-30=maflemin user-31=lbscrmod user-32=innovat1 user-33=stuartge user-34=askhform user-35=nativene user-36=skyfirec user-37=alexadmin user-38=bedfords user-39=belle user-40=ggaaorgu user-41=newstoda user-42=bemadonn user-43=brighto1 user-44=nstriton user-45=firstre2 user-46=vivienn1 user-47=battlere user-48=oneoarco
Sep 20 19:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=accooper user-50=ianrayne user-51=connectedshoppin user-52=thqkgnbz user-53=gilpin user-54=milloyco user-55=elecleis user-56=hubmaster user-57=carsinyo user-58=fetch user-59=firstrel user-60=clarkass user-61=costestimatorco user-62=firstred user-63=southlon user-64=highlegh user-65=jonhartl user-66=seftvta user-67=ultbcrra user-68=firstres user-69=coursemc user-70=opaiscyx user-71=hirefootballgame user-72=eugincou user-73=courseme user-74=cambria1 user-75=cathski user-76=reliable user-77=ninejimm user-78=pugwash user-79=paulmca1 user-80=howardon user-81=cwsocial user-82=isleofwi user-83=smrszyqg user-84=hidden user-85=nomistakes user-86=tigerlet user-87=barbersh user-88=nscdp user-89=health2045 user-90=fortunaz user-91=leftie user-92=foods user-93=lkpier user-94=philmcph user-95=ctedorgu user-96=firstre5 user-97=steakbridieme user-98=donnychicago user-99=beauty user-100=eatspam user-101=darkstar
Sep 20 19:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=burydropin user-104=fawcettd user-105=nsceres user-106=bwppodcast user-107=zebrapho user-108=steve user-109=asandcoc user-110=sibtoncc user-111=ladburyp user-112=dancinggardener user-113=stagingerris user-114=kategilpin user-115=design user-116=oubpgvbx user-117=tstardom user-118=what user-119=sketchy user-120=cath user-121=havantho user-122=nvihkvu user-123=bakery user-124=sosevalu user-125=crrtipdl user-126=nove user-127=boldover user-128=hodgsonmail user-129=ranxterc user-130=outdoorc user-131=branko user-132=romaldki user-133=attlebor user-134=lucy user-135=onlycont user-136=chrisdal user-137=mcdermos user-138=careers user-139=nbhavers user-140=david user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 19:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:48 nativespace-cdp sudo[236883]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:50 nativespace-cdp sudo[236922]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ipStFX58nRvfV3pO.~
Sep 20 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:50 nativespace-cdp sudo[236925]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ipStFX58nRvfV3pO.~'
Sep 20 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:50 nativespace-cdp sudo[236928]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ipStFX58nRvfV3pO.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:50 nativespace-cdp sudo[236932]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 19:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:50 nativespace-cdp sudo[236935]: pam_unix(sudo:session): session closed for user root
Sep 20 19:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 19:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 19:09:58 nativespace-cdp sudo[236970]: pam_unix(sudo:session): session closed for user root
Sep 20 19:11:37 nativespace-cdp sshd[237594]: Connection closed by 159.100.136.21 port 44078 [preauth]
Sep 20 19:16:36 nativespace-cdp sshd[238675]: Connection closed by 159.100.136.21 port 54012 [preauth]
Sep 20 19:21:34 nativespace-cdp sshd[240196]: Connection closed by 159.100.136.21 port 34916 [preauth]
Sep 20 19:26:35 nativespace-cdp sshd[241229]: Connection closed by 159.100.136.21 port 44028 [preauth]
Sep 20 19:31:35 nativespace-cdp sshd[242524]: Connection closed by 159.100.136.21 port 53484 [preauth]
Sep 20 19:36:33 nativespace-cdp sshd[244005]: Connection closed by 159.100.136.21 port 34802 [preauth]
Sep 20 19:41:33 nativespace-cdp sshd[245099]: Connection closed by 159.100.136.21 port 43992 [preauth]
Sep 20 19:46:36 nativespace-cdp sshd[246353]: Connection closed by 159.100.136.21 port 53304 [preauth]
Sep 20 19:51:33 nativespace-cdp sshd[248037]: Connection closed by 159.100.136.21 port 34434 [preauth]
Sep 20 19:56:33 nativespace-cdp sshd[249075]: Connection closed by 159.100.136.21 port 44014 [preauth]
Sep 20 20:01:33 nativespace-cdp sshd[250311]: Connection closed by 159.100.136.21 port 53494 [preauth]
Sep 20 20:06:34 nativespace-cdp sshd[251632]: Connection closed by 159.100.136.21 port 34490 [preauth]
Sep 20 20:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 20:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:40 nativespace-cdp sudo[252428]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 20:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:40 nativespace-cdp sudo[252431]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 20:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:48 nativespace-cdp sudo[252434]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:48 nativespace-cdp sudo[252456]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252460]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252473]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252476]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252479]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252483]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252486]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 20:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:52 nativespace-cdp sudo[252490]: pam_unix(sudo:session): session closed for user root
Sep 20 20:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 20:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:09:59 nativespace-cdp sudo[252508]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 20:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:12 nativespace-cdp sudo[252512]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=martsblo user-2=ptkxhsbt user-3=dickemery123 user-4=lbhyisi user-5=hhdugcor user-6=magichat user-7=brmrjxl user-8=lakesan1 user-9=sarafoundation user-10=atestord user-11=strathar user-12=wilsonsw user-13=musorguk user-14=megacards user-15=jarvisin user-16=hodgesonweb user-17=theblack user-18=spectrum user-19=still user-20=agproduc user-21=leereyn1 user-22=stephani user-23=markward user-24=booff user-25=foundation user-26=maflemin user-27=lbscrmod user-28=athenare user-29=connect9 user-30=vantagep user-31=ulsukarm user-32=skyfirec user-33=alexadmin user-34=stuartge user-35=askhform user-36=innovat1 user-37=nativene user-38=brighto1 user-39=nstriton user-40=battlere user-41=oneoarco user-42=firstre2 user-43=vivienn1 user-44=bedfords user-45=bemadonn user-46=belle user-47=ggaaorgu user-48=newstoda
Sep 20 20:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=elecleis user-50=gilpin user-51=milloyco user-52=carsinyo user-53=fetch user-54=hubmaster user-55=ianrayne user-56=accooper user-57=thqkgnbz user-58=connectedshoppin user-59=firstres user-60=seftvta user-61=jonhartl user-62=ultbcrra user-63=opaiscyx user-64=coursemc user-65=costestimatorco user-66=clarkass user-67=firstrel user-68=southlon user-69=highlegh user-70=firstred user-71=ninejimm user-72=reliable user-73=cathski user-74=cambria1 user-75=howardon user-76=paulmca1 user-77=pugwash user-78=cwsocial user-79=hirefootballgame user-80=courseme user-81=eugincou user-82=fortunaz user-83=health2045 user-84=leftie user-85=foods user-86=nscdp user-87=philmcph user-88=ctedorgu user-89=donnychicago user-90=firstre5 user-91=steakbridieme user-92=lkpier user-93=smrszyqg user-94=isleofwi user-95=barbersh user-96=tigerlet user-97=hidden user-98=nomistakes user-99=burydropin user-100=fawcettd user-101=nsceres
Sep 20 20:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=darkstar user-104=beauty user-105=dhyana user-106=asandcoc user-107=sibtoncc user-108=zebrapho user-109=bwppodcast user-110=steve user-111=what user-112=oubpgvbx user-113=tstardom user-114=nvihkvu user-115=sketchy user-116=cath user-117=havantho user-118=kategilpin user-119=ladburyp user-120=dancinggardener user-121=stagingerris user-122=design user-123=nove user-124=boldover user-125=sosevalu user-126=crrtipdl user-127=bakery user-128=attlebor user-129=lucy user-130=onlycont user-131=branko user-132=ranxterc user-133=hodgsonmail user-134=outdoorc user-135=romaldki user-136=tomandle user-137=jennimil user-138=mcdermos user-139=chrisdal user-140=nbhavers user-141=careers user-142=david feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 20 20:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 20:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:14 nativespace-cdp sudo[252668]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:15 nativespace-cdp sudo[252678]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aCpzcVQqsOmIPGKT.~
Sep 20 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:15 nativespace-cdp sudo[252681]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aCpzcVQqsOmIPGKT.~'
Sep 20 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:15 nativespace-cdp sudo[252684]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-aCpzcVQqsOmIPGKT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:15 nativespace-cdp sudo[252688]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:15 nativespace-cdp sudo[252691]: pam_unix(sudo:session): session closed for user root
Sep 20 20:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 20:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 20:10:36 nativespace-cdp sudo[252798]: pam_unix(sudo:session): session closed for user root
Sep 20 20:11:33 nativespace-cdp sshd[253033]: Connection closed by 159.100.136.21 port 43164 [preauth]
Sep 20 20:16:39 nativespace-cdp sshd[254078]: Connection closed by 159.100.136.21 port 52838 [preauth]
Sep 20 20:21:33 nativespace-cdp sshd[255491]: Connection closed by 159.100.136.21 port 33632 [preauth]
Sep 20 20:26:34 nativespace-cdp sshd[256447]: Connection closed by 159.100.136.21 port 42384 [preauth]
Sep 20 20:31:33 nativespace-cdp sshd[257634]: Connection closed by 159.100.136.21 port 51682 [preauth]
Sep 20 20:36:34 nativespace-cdp sshd[258929]: Connection closed by 159.100.136.21 port 33218 [preauth]
Sep 20 20:41:33 nativespace-cdp sshd[260272]: Connection closed by 159.100.136.21 port 42400 [preauth]
Sep 20 20:46:38 nativespace-cdp sshd[261374]: Connection closed by 159.100.136.21 port 51718 [preauth]
Sep 20 20:51:34 nativespace-cdp sshd[262917]: Connection closed by 159.100.136.21 port 32830 [preauth]
Sep 20 20:56:35 nativespace-cdp sshd[263991]: Connection closed by 159.100.136.21 port 42206 [preauth]
Sep 20 21:01:35 nativespace-cdp sshd[265348]: Connection closed by 159.100.136.21 port 51452 [preauth]
Sep 20 21:06:34 nativespace-cdp sshd[266839]: Connection closed by 159.100.136.21 port 32850 [preauth]
Sep 20 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:41 nativespace-cdp sudo[267281]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:41 nativespace-cdp sudo[267284]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:43 nativespace-cdp sudo[267287]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:44 nativespace-cdp sudo[267300]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267303]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267316]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267319]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267322]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267325]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267329]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:48 nativespace-cdp sudo[267332]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 21:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:50 nativespace-cdp sudo[267348]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 21:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:56 nativespace-cdp sudo[267352]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=athenare user-3=connect9 user-4=vantagep user-5=maflemin user-6=lbscrmod user-7=foundation user-8=markward user-9=booff user-10=stephani user-11=leereyn1 user-12=still user-13=agproduc user-14=spectrum user-15=theblack user-16=hodgesonweb user-17=jarvisin user-18=musorguk user-19=megacards user-20=wilsonsw user-21=strathar user-22=sarafoundation user-23=atestord user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=lbhyisi user-28=hhdugcor user-29=dickemery123 user-30=ptkxhsbt user-31=martsblo user-32=firstred user-33=southlon user-34=highlegh user-35=firstrel user-36=clarkass user-37=costestimatorco user-38=opaiscyx user-39=coursemc user-40=jonhartl user-41=seftvta user-42=ultbcrra user-43=firstres user-44=connectedshoppin user-45=thqkgnbz user-46=accooper user-47=ianrayne
Sep 20 21:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=hubmaster user-49=carsinyo user-50=fetch user-51=gilpin user-52=milloyco user-53=elecleis user-54=ggaaorgu user-55=belle user-56=newstoda user-57=bemadonn user-58=bedfords user-59=firstre2 user-60=vivienn1 user-61=battlere user-62=oneoarco user-63=brighto1 user-64=nstriton user-65=nativene user-66=innovat1 user-67=askhform user-68=stuartge user-69=alexadmin user-70=skyfirec user-71=steve user-72=bwppodcast user-73=zebrapho user-74=asandcoc user-75=sibtoncc user-76=dhyana user-77=beauty user-78=eatspam user-79=darkstar user-80=nsceres user-81=burydropin user-82=fawcettd user-83=hidden user-84=nomistakes user-85=tigerlet user-86=barbersh user-87=smrszyqg user-88=isleofwi user-89=lkpier user-90=philmcph user-91=ctedorgu user-92=firstre5 user-93=steakbridieme user-94=donnychicago user-95=nscdp user-96=fortunaz user-97=health2045 user-98=leftie user-99=foods user-100=eugincou user-101=courseme
Sep 20 21:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=pugwash user-104=paulmca1 user-105=howardon user-106=cwsocial user-107=cathski user-108=cambria1 user-109=reliable user-110=ninejimm user-111=careers user-112=nbhavers user-113=david user-114=chrisdal user-115=mcdermos user-116=jennimil user-117=tomandle user-118=romaldki user-119=hodgsonmail user-120=ranxterc user-121=outdoorc user-122=branko user-123=onlycont user-124=attlebor user-125=lucy user-126=bakery user-127=sosevalu user-128=crrtipdl user-129=boldover user-130=nove user-131=design user-132=ladburyp user-133=stagingerris user-134=dancinggardener user-135=kategilpin user-136=sketchy user-137=cath user-138=havantho user-139=nvihkvu user-140=oubpgvbx user-141=tstardom user-142=what feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 21:09:56 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 21:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:58 nativespace-cdp sudo[267374]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:59 nativespace-cdp sudo[267381]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZLXsuHegAyBHaltc.~
Sep 20 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:59 nativespace-cdp sudo[267384]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZLXsuHegAyBHaltc.~'
Sep 20 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:59 nativespace-cdp sudo[267388]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZLXsuHegAyBHaltc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:59 nativespace-cdp sudo[267392]: pam_unix(sudo:session): session closed for user root
Sep 20 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:09:59 nativespace-cdp sudo[267395]: pam_unix(sudo:session): session closed for user root
Sep 20 21:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 21:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:10:05 nativespace-cdp sudo[267415]: pam_unix(sudo:session): session closed for user root
Sep 20 21:11:34 nativespace-cdp sshd[267876]: Connection closed by 159.100.136.21 port 42196 [preauth]
Sep 20 21:17:30 nativespace-cdp sshd[268968]: Did not receive identification string from 159.100.136.21 port 52018
Sep 20 21:21:38 nativespace-cdp sshd[270345]: Did not receive identification string from 159.100.136.21 port 32988
Sep 20 21:26:35 nativespace-cdp sshd[271621]: Connection closed by 159.100.136.21 port 42654 [preauth]
Sep 20 21:31:33 nativespace-cdp sshd[272900]: Connection closed by 159.100.136.21 port 51994 [preauth]
Sep 20 21:36:33 nativespace-cdp sshd[274478]: Connection closed by 159.100.136.21 port 33318 [preauth]
Sep 20 21:41:35 nativespace-cdp sshd[275623]: Connection closed by 159.100.136.21 port 42172 [preauth]
Sep 20 21:44:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 21:44:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:44:37 nativespace-cdp sudo[276390]: pam_unix(sudo:session): session closed for user root
Sep 20 21:44:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status clarkass
Sep 20 21:44:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 21:44:47 nativespace-cdp sudo[276414]: pam_unix(sudo:session): session closed for user root
Sep 20 21:46:36 nativespace-cdp sshd[277148]: Connection closed by 159.100.136.21 port 51218 [preauth]
Sep 20 21:51:35 nativespace-cdp sshd[278700]: Connection closed by 159.100.136.21 port 59298 [preauth]
Sep 20 21:56:09 nativespace-cdp sshd[279503]: Accepted publickey for root from 185.67.178.249 port 50508 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 20 21:56:09 nativespace-cdp sshd[279503]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 20 21:56:33 nativespace-cdp sshd[279674]: Connection closed by 159.100.136.21 port 40780 [preauth]
Sep 20 22:01:35 nativespace-cdp sshd[280912]: Connection closed by 159.100.136.21 port 50036 [preauth]
Sep 20 22:06:33 nativespace-cdp sshd[282625]: Connection closed by 159.100.136.21 port 59762 [preauth]
Sep 20 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:40 nativespace-cdp sudo[283109]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:40 nativespace-cdp sudo[283112]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:43 nativespace-cdp sudo[283115]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:43 nativespace-cdp sudo[283131]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 22:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283134]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283149]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283152]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283155]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283158]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283161]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:48 nativespace-cdp sudo[283164]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 22:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:51 nativespace-cdp sudo[283176]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 22:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:58 nativespace-cdp sudo[283182]: pam_unix(sudo:session): session closed for user root
Sep 20 22:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=innovat1 user-4=stuartge user-5=askhform user-6=nativene user-7=brighto1 user-8=nstriton user-9=firstre2 user-10=vivienn1 user-11=battlere user-12=oneoarco user-13=bedfords user-14=belle user-15=ggaaorgu user-16=newstoda user-17=bemadonn user-18=milloyco user-19=gilpin user-20=elecleis user-21=hubmaster user-22=carsinyo user-23=fetch user-24=accooper user-25=ianrayne user-26=connectedshoppin user-27=thqkgnbz user-28=jonhartl user-29=seftvta user-30=ultbcrra user-31=firstres user-32=opaiscyx user-33=coursemc user-34=firstrel user-35=clarkass user-36=costestimatorco user-37=firstred user-38=southlon user-39=highlegh user-40=martsblo user-41=dickemery123 user-42=ptkxhsbt user-43=lbhyisi user-44=hhdugcor user-45=magichat user-46=brmrjxl user-47=lakesan1
Sep 20 22:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=sarafoundation user-50=atestord user-51=wilsonsw user-52=musorguk user-53=megacards user-54=jarvisin user-55=spectrum user-56=theblack user-57=hodgesonweb user-58=still user-59=agproduc user-60=stephani user-61=leereyn1 user-62=markward user-63=foundation user-64=booff user-65=connect9 user-66=athenare user-67=vantagep user-68=maflemin user-69=lbscrmod user-70=ulsukarm user-71=tstardom user-72=oubpgvbx user-73=what user-74=cath user-75=sketchy user-76=havantho user-77=nvihkvu user-78=ladburyp user-79=stagingerris user-80=dancinggardener user-81=kategilpin user-82=design user-83=nove user-84=boldover user-85=bakery user-86=sosevalu user-87=crrtipdl user-88=attlebor user-89=lucy user-90=onlycont user-91=ranxterc user-92=hodgsonmail user-93=outdoorc user-94=branko user-95=romaldki user-96=tomandle user-97=jennimil user-98=chrisdal user-99=mcdermos user-100=careers user-101=nbhavers
Sep 20 22:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=david user-103=cathski user-104=cambria1 user-105=reliable user-106=ninejimm user-107=howardon user-108=paulmca1 user-109=pugwash user-110=cwsocial user-111=hirefootballgame user-112=eugincou user-113=courseme user-114=nscdp user-115=health2045 user-116=fortunaz user-117=foods user-118=leftie user-119=lkpier user-120=ctedorgu user-121=philmcph user-122=donnychicago user-123=firstre5 user-124=steakbridieme user-125=isleofwi user-126=smrszyqg user-127=hidden user-128=nomistakes user-129=barbersh user-130=tigerlet user-131=burydropin user-132=fawcettd user-133=nsceres user-134=beauty user-135=eatspam user-136=darkstar user-137=dhyana user-138=sibtoncc user-139=asandcoc user-140=bwppodcast user-141=zebrapho user-142=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 22:09:58 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 22:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:09:59 nativespace-cdp sudo[283199]: pam_unix(sudo:session): session closed for user root
Sep 20 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:10:00 nativespace-cdp sudo[283206]: pam_unix(sudo:session): session closed for user root
Sep 20 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VDjT9PY5O9UCoiaP.~
Sep 20 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:10:00 nativespace-cdp sudo[283209]: pam_unix(sudo:session): session closed for user root
Sep 20 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VDjT9PY5O9UCoiaP.~'
Sep 20 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:10:00 nativespace-cdp sudo[283212]: pam_unix(sudo:session): session closed for user root
Sep 20 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-VDjT9PY5O9UCoiaP.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:10:00 nativespace-cdp sudo[283216]: pam_unix(sudo:session): session closed for user root
Sep 20 22:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 22:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:10:00 nativespace-cdp sudo[283219]: pam_unix(sudo:session): session closed for user root
Sep 20 22:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 22:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 22:10:23 nativespace-cdp sudo[283414]: pam_unix(sudo:session): session closed for user root
Sep 20 22:11:33 nativespace-cdp sshd[283734]: Connection closed by 159.100.136.21 port 40168 [preauth]
Sep 20 22:16:33 nativespace-cdp sshd[284718]: Connection closed by 159.100.136.21 port 49420 [preauth]
Sep 20 22:21:33 nativespace-cdp sshd[286359]: Connection closed by 159.100.136.21 port 58556 [preauth]
Sep 20 22:26:39 nativespace-cdp sshd[287392]: Connection closed by 159.100.136.21 port 39574 [preauth]
Sep 20 22:31:35 nativespace-cdp sshd[296168]: Connection closed by 159.100.136.21 port 48352 [preauth]
Sep 20 22:32:02 nativespace-cdp sshd[297442]: Accepted publickey for root from 185.67.178.249 port 35302 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 20 22:32:02 nativespace-cdp sshd[297442]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 20 22:32:38 nativespace-cdp sshd[297442]: Received disconnect from 185.67.178.249 port 35302:11: Normal Shutdown
Sep 20 22:32:38 nativespace-cdp sshd[297442]: Disconnected from 185.67.178.249 port 35302
Sep 20 22:32:38 nativespace-cdp sshd[297442]: pam_unix(sshd:session): session closed for user root
Sep 20 22:35:55 nativespace-cdp sshd[305904]: Accepted publickey for root from 185.67.178.249 port 36936 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 20 22:35:55 nativespace-cdp sshd[305904]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 20 22:36:33 nativespace-cdp sshd[307477]: Connection closed by 159.100.136.21 port 58038 [preauth]
Sep 20 22:39:52 nativespace-cdp sshd[305904]: Received disconnect from 185.67.178.249 port 36936:11: Normal Shutdown
Sep 20 22:39:52 nativespace-cdp sshd[305904]: Disconnected from 185.67.178.249 port 36936
Sep 20 22:39:52 nativespace-cdp sshd[305904]: pam_unix(sshd:session): session closed for user root
Sep 20 22:41:34 nativespace-cdp sshd[315903]: Connection closed by 159.100.136.21 port 39016 [preauth]
Sep 20 22:44:06 nativespace-cdp sshd[319210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.228  user=root
Sep 20 22:44:06 nativespace-cdp sshd[319210]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 22:44:09 nativespace-cdp sshd[319210]: Failed password for root from 51.75.124.228 port 56280 ssh2
Sep 20 22:44:09 nativespace-cdp sshd[319210]: Received disconnect from 51.75.124.228 port 56280:11: Bye Bye [preauth]
Sep 20 22:44:09 nativespace-cdp sshd[319210]: Disconnected from 51.75.124.228 port 56280 [preauth]
Sep 20 22:45:45 nativespace-cdp sshd[319620]: Invalid user minecraft from 122.155.0.205 port 54519
Sep 20 22:45:45 nativespace-cdp sshd[319620]: input_userauth_request: invalid user minecraft [preauth]
Sep 20 22:45:45 nativespace-cdp sshd[319620]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 22:45:45 nativespace-cdp sshd[319620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.0.205
Sep 20 22:45:47 nativespace-cdp sshd[319620]: Failed password for invalid user minecraft from 122.155.0.205 port 54519 ssh2
Sep 20 22:45:47 nativespace-cdp sshd[319620]: Received disconnect from 122.155.0.205 port 54519:11: Bye Bye [preauth]
Sep 20 22:45:47 nativespace-cdp sshd[319620]: Disconnected from 122.155.0.205 port 54519 [preauth]
Sep 20 22:46:38 nativespace-cdp sshd[319764]: Connection closed by 159.100.136.21 port 48060 [preauth]
Sep 20 22:47:38 nativespace-cdp sshd[320067]: Invalid user ionguest from 51.75.124.228 port 35280
Sep 20 22:47:38 nativespace-cdp sshd[320067]: input_userauth_request: invalid user ionguest [preauth]
Sep 20 22:47:38 nativespace-cdp sshd[320067]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 22:47:38 nativespace-cdp sshd[320067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.228
Sep 20 22:47:40 nativespace-cdp sshd[320067]: Failed password for invalid user ionguest from 51.75.124.228 port 35280 ssh2
Sep 20 22:47:44 nativespace-cdp sshd[320067]: Received disconnect from 51.75.124.228 port 35280:11: Bye Bye [preauth]
Sep 20 22:47:44 nativespace-cdp sshd[320067]: Disconnected from 51.75.124.228 port 35280 [preauth]
Sep 20 22:48:02 nativespace-cdp sshd[320462]: Connection closed by 122.155.0.205 port 46822 [preauth]
Sep 20 22:48:17 nativespace-cdp sshd[320553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.124.228  user=root
Sep 20 22:48:17 nativespace-cdp sshd[320553]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 20 22:48:19 nativespace-cdp sshd[320553]: Failed password for root from 51.75.124.228 port 58652 ssh2
Sep 20 22:48:19 nativespace-cdp sshd[320553]: Received disconnect from 51.75.124.228 port 58652:11: Bye Bye [preauth]
Sep 20 22:48:19 nativespace-cdp sshd[320553]: Disconnected from 51.75.124.228 port 58652 [preauth]
Sep 20 22:48:46 nativespace-cdp sshd[320639]: Invalid user smart from 122.155.0.205 port 18591
Sep 20 22:48:46 nativespace-cdp sshd[320639]: input_userauth_request: invalid user smart [preauth]
Sep 20 22:48:46 nativespace-cdp sshd[320639]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 22:48:46 nativespace-cdp sshd[320639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.0.205
Sep 20 22:48:48 nativespace-cdp sshd[320639]: Failed password for invalid user smart from 122.155.0.205 port 18591 ssh2
Sep 20 22:48:49 nativespace-cdp sshd[320639]: Received disconnect from 122.155.0.205 port 18591:11: Bye Bye [preauth]
Sep 20 22:48:49 nativespace-cdp sshd[320639]: Disconnected from 122.155.0.205 port 18591 [preauth]
Sep 20 22:49:34 nativespace-cdp sshd[320832]: Invalid user ionguest from 122.155.0.205 port 8447
Sep 20 22:49:34 nativespace-cdp sshd[320832]: input_userauth_request: invalid user ionguest [preauth]
Sep 20 22:49:34 nativespace-cdp sshd[320832]: pam_unix(sshd:auth): check pass; user unknown
Sep 20 22:49:34 nativespace-cdp sshd[320832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.0.205
Sep 20 22:49:36 nativespace-cdp sshd[320832]: Failed password for invalid user ionguest from 122.155.0.205 port 8447 ssh2
Sep 20 22:49:36 nativespace-cdp sshd[320832]: Received disconnect from 122.155.0.205 port 8447:11: Bye Bye [preauth]
Sep 20 22:49:36 nativespace-cdp sshd[320832]: Disconnected from 122.155.0.205 port 8447 [preauth]
Sep 20 22:51:33 nativespace-cdp sshd[321627]: Connection closed by 159.100.136.21 port 57808 [preauth]
Sep 20 22:56:33 nativespace-cdp sshd[323184]: Connection closed by 159.100.136.21 port 39442 [preauth]
Sep 20 23:01:33 nativespace-cdp sshd[324550]: Connection closed by 159.100.136.21 port 48752 [preauth]
Sep 20 23:06:33 nativespace-cdp sshd[326023]: Connection closed by 159.100.136.21 port 58664 [preauth]
Sep 20 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 20 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:37 nativespace-cdp sudo[326581]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 20 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:37 nativespace-cdp sudo[326585]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 20 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:39 nativespace-cdp sudo[326588]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 20 23:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:39 nativespace-cdp sudo[326599]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 20 23:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326603]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 20 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326619]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 20 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326622]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 20 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326625]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 20 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326628]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 20 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326631]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 20 23:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:43 nativespace-cdp sudo[326634]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 20 23:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:48 nativespace-cdp sudo[326650]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 20 23:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:50 nativespace-cdp sudo[326655]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=newstoda user-2=belle user-3=ggaaorgu user-4=bemadonn user-5=bedfords user-6=vivienn1 user-7=firstre2 user-8=oneoarco user-9=battlere user-10=nstriton user-11=brighto1 user-12=nativene user-13=innovat1 user-14=stuartge user-15=askhform user-16=alexadmin user-17=skyfirec user-18=firstred user-19=highlegh user-20=southlon user-21=firstrel user-22=clarkass user-23=costestimatorco user-24=coursemc user-25=opaiscyx user-26=ultbcrra user-27=seftvta user-28=jonhartl user-29=firstres user-30=connectedshoppin user-31=thqkgnbz user-32=accooper user-33=ianrayne user-34=hubmaster user-35=fetch user-36=carsinyo user-37=milloyco user-38=gilpin user-39=elecleis user-40=megacards user-41=musorguk user-42=wilsonsw user-43=strathar user-44=atestord user-45=sarafoundation user-46=lakesan1 user-47=brmrjxl
Sep 20 23:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=hhdugcor user-50=lbhyisi user-51=dickemery123 user-52=ptkxhsbt user-53=martsblo user-54=ulsukarm user-55=vantagep user-56=athenare user-57=connect9 user-58=lbscrmod user-59=maflemin user-60=booff user-61=markward user-62=foundation user-63=stephani user-64=leereyn1 user-65=agproduc user-66=still user-67=spectrum user-68=theblack user-69=hodgesonweb user-70=jarvisin user-71=bakery user-72=crrtipdl user-73=sosevalu user-74=boldover user-75=nove user-76=design user-77=dancinggardener user-78=stagingerris user-79=ladburyp user-80=kategilpin user-81=havantho user-82=cath user-83=sketchy user-84=nvihkvu user-85=oubpgvbx user-86=tstardom user-87=what user-88=david user-89=nbhavers user-90=careers user-91=chrisdal user-92=mcdermos user-93=jennimil user-94=tomandle user-95=romaldki user-96=ranxterc user-97=outdoorc user-98=hodgsonmail user-99=branko user-100=onlycont user-101=lucy
Sep 20 23:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=attlebor user-103=nomistakes user-104=hidden user-105=barbersh user-106=tigerlet user-107=smrszyqg user-108=isleofwi user-109=lkpier user-110=steakbridieme user-111=firstre5 user-112=donnychicago user-113=ctedorgu user-114=philmcph user-115=nscdp user-116=foods user-117=leftie user-118=health2045 user-119=fortunaz user-120=eugincou user-121=courseme user-122=hirefootballgame user-123=cwsocial user-124=howardon user-125=paulmca1 user-126=pugwash user-127=cathski user-128=cambria1 user-129=reliable user-130=ninejimm user-131=steve user-132=bwppodcast user-133=zebrapho user-134=sibtoncc user-135=asandcoc user-136=dhyana user-137=beauty user-138=darkstar user-139=eatspam user-140=nsceres user-141=fawcettd user-142=burydropin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 20 23:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 20 23:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:51 nativespace-cdp sudo[326672]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:52 nativespace-cdp sudo[326678]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QQ6ubdSddi8xiq1I.~
Sep 20 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:52 nativespace-cdp sudo[326684]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QQ6ubdSddi8xiq1I.~'
Sep 20 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:52 nativespace-cdp sudo[326687]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QQ6ubdSddi8xiq1I.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 20 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:52 nativespace-cdp sudo[326691]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 20 23:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:52 nativespace-cdp sudo[326694]: pam_unix(sudo:session): session closed for user root
Sep 20 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 20 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 20 23:09:54 nativespace-cdp sudo[326715]: pam_unix(sudo:session): session closed for user root
Sep 20 23:11:33 nativespace-cdp sshd[327124]: Connection closed by 159.100.136.21 port 40144 [preauth]
Sep 20 23:16:37 nativespace-cdp sshd[328153]: Connection closed by 159.100.136.21 port 49854 [preauth]
Sep 20 23:21:33 nativespace-cdp sshd[329649]: Connection closed by 159.100.136.21 port 59320 [preauth]
Sep 20 23:26:34 nativespace-cdp sshd[330642]: Connection closed by 159.100.136.21 port 40724 [preauth]
Sep 20 23:31:35 nativespace-cdp sshd[331741]: Connection closed by 159.100.136.21 port 50074 [preauth]
Sep 20 23:36:33 nativespace-cdp sshd[332850]: Connection closed by 159.100.136.21 port 59144 [preauth]
Sep 20 23:41:36 nativespace-cdp sshd[334476]: Connection closed by 159.100.136.21 port 40518 [preauth]
Sep 20 23:46:33 nativespace-cdp sshd[335558]: Connection closed by 159.100.136.21 port 50456 [preauth]
Sep 20 23:51:33 nativespace-cdp sshd[336846]: Connection closed by 159.100.136.21 port 60158 [preauth]
Sep 20 23:56:35 nativespace-cdp sshd[338093]: Connection closed by 159.100.136.21 port 41886 [preauth]
Sep 21 00:01:34 nativespace-cdp sshd[339405]: Connection closed by 159.100.136.21 port 51478 [preauth]
Sep 21 00:06:33 nativespace-cdp sshd[340827]: Connection closed by 159.100.136.21 port 32870 [preauth]
Sep 21 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:32 nativespace-cdp sudo[341363]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:32 nativespace-cdp sudo[341366]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:33 nativespace-cdp sudo[341369]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:33 nativespace-cdp sudo[341375]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:36 nativespace-cdp sudo[341378]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 00:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:36 nativespace-cdp sudo[341397]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:37 nativespace-cdp sudo[341400]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:37 nativespace-cdp sudo[341403]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:37 nativespace-cdp sudo[341406]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:37 nativespace-cdp sudo[341409]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:37 nativespace-cdp sudo[341412]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 00:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:38 nativespace-cdp sudo[341420]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 00:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:39 nativespace-cdp sudo[341425]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=darkstar user-3=eatspam user-4=beauty user-5=nsceres user-6=fawcettd user-7=burydropin user-8=steve user-9=zebrapho user-10=bwppodcast user-11=sibtoncc user-12=asandcoc user-13=courseme user-14=eugincou user-15=hirefootballgame user-16=cwsocial user-17=paulmca1 user-18=pugwash user-19=howardon user-20=ninejimm user-21=reliable user-22=cambria1 user-23=cathski user-24=barbersh user-25=tigerlet user-26=nomistakes user-27=hidden user-28=isleofwi user-29=smrszyqg user-30=firstre5 user-31=donnychicago user-32=steakbridieme user-33=ctedorgu user-34=philmcph user-35=lkpier user-36=foods user-37=leftie user-38=fortunaz user-39=health2045 user-40=nscdp user-41=romaldki user-42=branko user-43=ranxterc user-44=outdoorc user-45=hodgsonmail user-46=onlycont user-47=lucy user-48=attlebor
Sep 21 00:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=david user-50=careers user-51=nbhavers user-52=mcdermos user-53=chrisdal user-54=jennimil user-55=tomandle user-56=design user-57=kategilpin user-58=stagingerris user-59=dancinggardener user-60=ladburyp user-61=nvihkvu user-62=havantho user-63=cath user-64=sketchy user-65=what user-66=tstardom user-67=oubpgvbx user-68=crrtipdl user-69=sosevalu user-70=bakery user-71=boldover user-72=nove user-73=leereyn1 user-74=stephani user-75=agproduc user-76=still user-77=theblack user-78=hodgesonweb user-79=spectrum user-80=jarvisin user-81=ulsukarm user-82=lbscrmod user-83=maflemin user-84=vantagep user-85=connect9 user-86=athenare user-87=booff user-88=markward user-89=foundation user-90=magichat user-91=hhdugcor user-92=lbhyisi user-93=ptkxhsbt user-94=dickemery123 user-95=martsblo user-96=megacards user-97=musorguk user-98=wilsonsw user-99=atestord user-100=sarafoundation user-101=strathar user-102=lakesan1
Sep 21 00:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=brmrjxl user-104=thqkgnbz user-105=connectedshoppin user-106=ianrayne user-107=accooper user-108=fetch user-109=carsinyo user-110=hubmaster user-111=elecleis user-112=milloyco user-113=gilpin user-114=highlegh user-115=southlon user-116=firstred user-117=costestimatorco user-118=clarkass user-119=firstrel user-120=opaiscyx user-121=coursemc user-122=firstres user-123=ultbcrra user-124=seftvta user-125=jonhartl user-126=nativene user-127=askhform user-128=stuartge user-129=innovat1 user-130=skyfirec user-131=alexadmin user-132=bemadonn user-133=newstoda user-134=ggaaorgu user-135=belle user-136=bedfords user-137=oneoarco user-138=battlere user-139=vivienn1 user-140=firstre2 user-141=nstriton user-142=brighto1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 00:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 00:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:40 nativespace-cdp sudo[341430]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:40 nativespace-cdp sudo[341439]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-M4MIAF9WTcRS002m.~
Sep 21 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:40 nativespace-cdp sudo[341442]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-M4MIAF9WTcRS002m.~'
Sep 21 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:40 nativespace-cdp sudo[341445]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-M4MIAF9WTcRS002m.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:40 nativespace-cdp sudo[341449]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 00:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:40 nativespace-cdp sudo[341452]: pam_unix(sudo:session): session closed for user root
Sep 21 00:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 00:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 00:09:52 nativespace-cdp sudo[341495]: pam_unix(sudo:session): session closed for user root
Sep 21 00:11:33 nativespace-cdp sshd[341932]: Connection closed by 159.100.136.21 port 41750 [preauth]
Sep 21 00:16:34 nativespace-cdp sshd[342990]: Connection closed by 159.100.136.21 port 51644 [preauth]
Sep 21 00:21:33 nativespace-cdp sshd[344526]: Connection closed by 159.100.136.21 port 60656 [preauth]
Sep 21 00:24:32 nativespace-cdp sshd[345757]: Invalid user superman from 47.180.114.229 port 43718
Sep 21 00:24:32 nativespace-cdp sshd[345757]: input_userauth_request: invalid user superman [preauth]
Sep 21 00:24:32 nativespace-cdp sshd[345757]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 00:24:32 nativespace-cdp sshd[345757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.114.229
Sep 21 00:24:35 nativespace-cdp sshd[345757]: Failed password for invalid user superman from 47.180.114.229 port 43718 ssh2
Sep 21 00:24:35 nativespace-cdp sshd[345757]: Received disconnect from 47.180.114.229 port 43718:11: Bye Bye [preauth]
Sep 21 00:24:35 nativespace-cdp sshd[345757]: Disconnected from 47.180.114.229 port 43718 [preauth]
Sep 21 00:25:29 nativespace-cdp sshd[279503]: pam_unix(sshd:session): session closed for user root
Sep 21 00:26:33 nativespace-cdp sshd[346209]: Connection closed by 159.100.136.21 port 42222 [preauth]
Sep 21 00:26:39 nativespace-cdp sshd[346218]: Invalid user ubuntu from 47.180.114.229 port 41990
Sep 21 00:26:39 nativespace-cdp sshd[346218]: input_userauth_request: invalid user ubuntu [preauth]
Sep 21 00:26:39 nativespace-cdp sshd[346218]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 00:26:39 nativespace-cdp sshd[346218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.114.229
Sep 21 00:26:41 nativespace-cdp sshd[346218]: Failed password for invalid user ubuntu from 47.180.114.229 port 41990 ssh2
Sep 21 00:26:41 nativespace-cdp sshd[346218]: Received disconnect from 47.180.114.229 port 41990:11: Bye Bye [preauth]
Sep 21 00:26:41 nativespace-cdp sshd[346218]: Disconnected from 47.180.114.229 port 41990 [preauth]
Sep 21 00:27:21 nativespace-cdp sshd[346347]: Invalid user test_user from 47.180.114.229 port 56698
Sep 21 00:27:21 nativespace-cdp sshd[346347]: input_userauth_request: invalid user test_user [preauth]
Sep 21 00:27:21 nativespace-cdp sshd[346347]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 00:27:21 nativespace-cdp sshd[346347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.114.229
Sep 21 00:27:23 nativespace-cdp sshd[346347]: Failed password for invalid user test_user from 47.180.114.229 port 56698 ssh2
Sep 21 00:27:23 nativespace-cdp sshd[346347]: Received disconnect from 47.180.114.229 port 56698:11: Bye Bye [preauth]
Sep 21 00:27:23 nativespace-cdp sshd[346347]: Disconnected from 47.180.114.229 port 56698 [preauth]
Sep 21 00:31:33 nativespace-cdp sshd[347412]: Connection closed by 159.100.136.21 port 51800 [preauth]
Sep 21 00:36:33 nativespace-cdp sshd[348858]: Connection closed by 159.100.136.21 port 33216 [preauth]
Sep 21 00:41:34 nativespace-cdp sshd[349942]: Connection closed by 159.100.136.21 port 41410 [preauth]
Sep 21 00:46:33 nativespace-cdp sshd[350990]: Connection closed by 159.100.136.21 port 50016 [preauth]
Sep 21 00:51:33 nativespace-cdp sshd[352427]: Connection closed by 159.100.136.21 port 59264 [preauth]
Sep 21 00:56:33 nativespace-cdp sshd[353457]: Connection closed by 159.100.136.21 port 40792 [preauth]
Sep 21 01:01:33 nativespace-cdp sshd[354728]: Connection closed by 159.100.136.21 port 50020 [preauth]
Sep 21 01:06:34 nativespace-cdp sshd[356161]: Connection closed by 159.100.136.21 port 58790 [preauth]
Sep 21 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:31 nativespace-cdp sudo[356745]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:31 nativespace-cdp sudo[356748]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:31 nativespace-cdp sudo[356752]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:31 nativespace-cdp sudo[356757]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356761]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356773]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356776]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356779]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356782]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356785]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:33 nativespace-cdp sudo[356788]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 01:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:35 nativespace-cdp sudo[356800]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 01:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:36 nativespace-cdp sudo[356804]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=dhyana user-2=darkstar user-3=eatspam user-4=beauty user-5=nsceres user-6=fawcettd user-7=burydropin user-8=steve user-9=zebrapho user-10=bwppodcast user-11=asandcoc user-12=sibtoncc user-13=courseme user-14=eugincou user-15=hirefootballgame user-16=cwsocial user-17=paulmca1 user-18=pugwash user-19=howardon user-20=reliable user-21=ninejimm user-22=cathski user-23=cambria1 user-24=tigerlet user-25=barbersh user-26=nomistakes user-27=hidden user-28=smrszyqg user-29=isleofwi user-30=firstre5 user-31=steakbridieme user-32=donnychicago user-33=philmcph user-34=ctedorgu user-35=lkpier user-36=foods user-37=leftie user-38=fortunaz user-39=health2045 user-40=nscdp user-41=romaldki user-42=branko user-43=hodgsonmail user-44=ranxterc user-45=outdoorc user-46=onlycont user-47=lucy user-48=attlebor
Sep 21 01:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=david user-50=careers user-51=nbhavers user-52=mcdermos user-53=chrisdal user-54=jennimil user-55=tomandle user-56=design user-57=kategilpin user-58=dancinggardener user-59=stagingerris user-60=ladburyp user-61=nvihkvu user-62=havantho user-63=cath user-64=sketchy user-65=what user-66=oubpgvbx user-67=tstardom user-68=crrtipdl user-69=sosevalu user-70=bakery user-71=boldover user-72=nove user-73=leereyn1 user-74=stephani user-75=agproduc user-76=still user-77=theblack user-78=hodgesonweb user-79=spectrum user-80=jarvisin user-81=ulsukarm user-82=lbscrmod user-83=maflemin user-84=vantagep user-85=connect9 user-86=athenare user-87=foundation user-88=markward user-89=booff user-90=magichat user-91=hhdugcor user-92=lbhyisi user-93=ptkxhsbt user-94=dickemery123 user-95=martsblo user-96=megacards user-97=musorguk user-98=wilsonsw user-99=atestord user-100=sarafoundation user-101=strathar user-102=brmrjxl
Sep 21 01:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lakesan1 user-104=thqkgnbz user-105=connectedshoppin user-106=ianrayne user-107=accooper user-108=fetch user-109=carsinyo user-110=hubmaster user-111=elecleis user-112=milloyco user-113=gilpin user-114=highlegh user-115=southlon user-116=firstred user-117=costestimatorco user-118=firstrel user-119=clarkass user-120=coursemc user-121=opaiscyx user-122=firstres user-123=ultbcrra user-124=jonhartl user-125=seftvta user-126=nativene user-127=stuartge user-128=askhform user-129=innovat1 user-130=skyfirec user-131=alexadmin user-132=bemadonn user-133=newstoda user-134=belle user-135=ggaaorgu user-136=bedfords user-137=oneoarco user-138=battlere user-139=vivienn1 user-140=firstre2 user-141=nstriton user-142=brighto1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 01:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 01:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:36 nativespace-cdp sudo[356809]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 01:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:37 nativespace-cdp sudo[356816]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PAlThthrOhYamL2h.~
Sep 21 01:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:37 nativespace-cdp sudo[356819]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PAlThthrOhYamL2h.~'
Sep 21 01:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:37 nativespace-cdp sudo[356822]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PAlThthrOhYamL2h.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 01:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:37 nativespace-cdp sudo[356826]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 01:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:37 nativespace-cdp sudo[356829]: pam_unix(sudo:session): session closed for user root
Sep 21 01:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 01:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 01:09:49 nativespace-cdp sudo[356883]: pam_unix(sudo:session): session closed for user root
Sep 21 01:11:34 nativespace-cdp sshd[357320]: Connection closed by 159.100.136.21 port 39386 [preauth]
Sep 21 01:16:36 nativespace-cdp sshd[358411]: Connection closed by 159.100.136.21 port 48110 [preauth]
Sep 21 01:21:36 nativespace-cdp sshd[359857]: Connection closed by 159.100.136.21 port 57306 [preauth]
Sep 21 01:26:33 nativespace-cdp sshd[360899]: Connection closed by 159.100.136.21 port 38442 [preauth]
Sep 21 01:31:37 nativespace-cdp sshd[362675]: Connection closed by 159.100.136.21 port 47630 [preauth]
Sep 21 01:36:33 nativespace-cdp sshd[364106]: Connection closed by 159.100.136.21 port 57136 [preauth]
Sep 21 01:41:33 nativespace-cdp sshd[365179]: Connection closed by 159.100.136.21 port 38110 [preauth]
Sep 21 01:46:34 nativespace-cdp sshd[366917]: Connection closed by 159.100.136.21 port 47446 [preauth]
Sep 21 01:51:33 nativespace-cdp sshd[368425]: Connection closed by 159.100.136.21 port 56720 [preauth]
Sep 21 01:56:33 nativespace-cdp sshd[369434]: Connection closed by 159.100.136.21 port 38024 [preauth]
Sep 21 02:01:33 nativespace-cdp sshd[370578]: Connection closed by 159.100.136.21 port 47378 [preauth]
Sep 21 02:06:33 nativespace-cdp sshd[371975]: Connection closed by 159.100.136.21 port 55602 [preauth]
Sep 21 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:31 nativespace-cdp sudo[372520]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:31 nativespace-cdp sudo[372523]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:32 nativespace-cdp sudo[372526]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:32 nativespace-cdp sudo[372532]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372536]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372546]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372549]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372552]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372555]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372559]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:33 nativespace-cdp sudo[372562]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:40 nativespace-cdp sudo[372581]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:41 nativespace-cdp sudo[372586]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=foundation user-2=markward user-3=booff user-4=maflemin user-5=lbscrmod user-6=athenare user-7=connect9 user-8=vantagep user-9=ulsukarm user-10=jarvisin user-11=hodgesonweb user-12=theblack user-13=spectrum user-14=still user-15=agproduc user-16=leereyn1 user-17=stephani user-18=brmrjxl user-19=lakesan1 user-20=sarafoundation user-21=atestord user-22=strathar user-23=wilsonsw user-24=musorguk user-25=megacards user-26=martsblo user-27=ptkxhsbt user-28=dickemery123 user-29=lbhyisi user-30=hhdugcor user-31=magichat user-32=firstres user-33=jonhartl user-34=seftvta user-35=ultbcrra user-36=coursemc user-37=opaiscyx user-38=costestimatorco user-39=firstrel user-40=clarkass user-41=southlon user-42=highlegh user-43=firstred user-44=elecleis user-45=milloyco user-46=gilpin user-47=carsinyo
Sep 21 02:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=fetch user-49=hubmaster user-50=ianrayne user-51=accooper user-52=thqkgnbz user-53=connectedshoppin user-54=brighto1 user-55=nstriton user-56=battlere user-57=oneoarco user-58=firstre2 user-59=vivienn1 user-60=bedfords user-61=bemadonn user-62=ggaaorgu user-63=belle user-64=newstoda user-65=skyfirec user-66=alexadmin user-67=askhform user-68=stuartge user-69=innovat1 user-70=nativene user-71=sibtoncc user-72=asandcoc user-73=zebrapho user-74=bwppodcast user-75=steve user-76=burydropin user-77=fawcettd user-78=nsceres user-79=eatspam user-80=darkstar user-81=beauty user-82=dhyana user-83=fortunaz user-84=health2045 user-85=foods user-86=leftie user-87=nscdp user-88=philmcph user-89=ctedorgu user-90=donnychicago user-91=firstre5 user-92=steakbridieme user-93=lkpier user-94=smrszyqg user-95=isleofwi user-96=barbersh user-97=tigerlet user-98=hidden user-99=nomistakes user-100=ninejimm user-101=reliable
Sep 21 02:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cathski user-103=cambria1 user-104=pugwash user-105=paulmca1 user-106=howardon user-107=cwsocial user-108=hirefootballgame user-109=courseme user-110=eugincou user-111=tomandle user-112=jennimil user-113=mcdermos user-114=chrisdal user-115=nbhavers user-116=careers user-117=david user-118=attlebor user-119=lucy user-120=onlycont user-121=branko user-122=hodgsonmail user-123=outdoorc user-124=ranxterc user-125=romaldki user-126=nove user-127=boldover user-128=sosevalu user-129=crrtipdl user-130=bakery user-131=what user-132=oubpgvbx user-133=tstardom user-134=nvihkvu user-135=cath user-136=sketchy user-137=havantho user-138=kategilpin user-139=ladburyp user-140=stagingerris user-141=dancinggardener user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 02:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:41 nativespace-cdp sudo[372591]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:42 nativespace-cdp sudo[372596]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QjINoxmDPgWBJ3ca.~
Sep 21 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:42 nativespace-cdp sudo[372602]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QjINoxmDPgWBJ3ca.~'
Sep 21 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:42 nativespace-cdp sudo[372605]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QjINoxmDPgWBJ3ca.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:42 nativespace-cdp sudo[372609]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:42 nativespace-cdp sudo[372612]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 21 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:43 nativespace-cdp sudo[372616]: pam_unix(sudo:session): session closed for user root
Sep 21 02:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 02:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 02:09:47 nativespace-cdp sudo[372644]: pam_unix(sudo:session): session closed for user root
Sep 21 02:11:33 nativespace-cdp sshd[373049]: Connection closed by 159.100.136.21 port 36420 [preauth]
Sep 21 02:16:36 nativespace-cdp sshd[374093]: Connection closed by 159.100.136.21 port 46050 [preauth]
Sep 21 02:21:33 nativespace-cdp sshd[375408]: Connection closed by 159.100.136.21 port 55200 [preauth]
Sep 21 02:26:34 nativespace-cdp sshd[376540]: Connection closed by 159.100.136.21 port 35912 [preauth]
Sep 21 02:31:35 nativespace-cdp sshd[377668]: Connection closed by 159.100.136.21 port 44976 [preauth]
Sep 21 02:36:33 nativespace-cdp sshd[379311]: Connection closed by 159.100.136.21 port 54474 [preauth]
Sep 21 02:41:33 nativespace-cdp sshd[380396]: Connection closed by 159.100.136.21 port 35032 [preauth]
Sep 21 02:46:33 nativespace-cdp sshd[382117]: Connection closed by 159.100.136.21 port 44682 [preauth]
Sep 21 02:51:34 nativespace-cdp sshd[383782]: Connection closed by 159.100.136.21 port 53260 [preauth]
Sep 21 02:56:33 nativespace-cdp sshd[384941]: Connection closed by 159.100.136.21 port 33224 [preauth]
Sep 21 03:01:33 nativespace-cdp sshd[386855]: Connection closed by 159.100.136.21 port 42148 [preauth]
Sep 21 03:06:33 nativespace-cdp sshd[388125]: Connection closed by 159.100.136.21 port 51882 [preauth]
Sep 21 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:37 nativespace-cdp sudo[388972]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:37 nativespace-cdp sudo[388976]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:38 nativespace-cdp sudo[388979]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 03:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:38 nativespace-cdp sudo[388987]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 03:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:41 nativespace-cdp sudo[388991]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 03:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:41 nativespace-cdp sudo[389011]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 03:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:41 nativespace-cdp sudo[389014]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 03:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:42 nativespace-cdp sudo[389017]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 03:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:42 nativespace-cdp sudo[389020]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 03:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:42 nativespace-cdp sudo[389023]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 03:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:42 nativespace-cdp sudo[389026]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 03:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:43 nativespace-cdp sudo[389039]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:44 nativespace-cdp sudo[389044]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=markward user-2=booff user-3=foundation user-4=lbscrmod user-5=maflemin user-6=vantagep user-7=athenare user-8=connect9 user-9=ulsukarm user-10=jarvisin user-11=hodgesonweb user-12=theblack user-13=spectrum user-14=agproduc user-15=still user-16=leereyn1 user-17=stephani user-18=brmrjxl user-19=lakesan1 user-20=atestord user-21=sarafoundation user-22=strathar user-23=wilsonsw user-24=megacards user-25=musorguk user-26=martsblo user-27=ptkxhsbt user-28=dickemery123 user-29=hhdugcor user-30=lbhyisi user-31=magichat user-32=firstres user-33=ultbcrra user-34=seftvta user-35=jonhartl user-36=opaiscyx user-37=coursemc user-38=costestimatorco user-39=clarkass user-40=firstrel user-41=highlegh user-42=southlon user-43=firstred user-44=elecleis user-45=milloyco user-46=gilpin user-47=fetch
Sep 21 03:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=carsinyo user-49=hubmaster user-50=ianrayne user-51=accooper user-52=thqkgnbz user-53=connectedshoppin user-54=nstriton user-55=brighto1 user-56=oneoarco user-57=battlere user-58=vivienn1 user-59=firstre2 user-60=bedfords user-61=bemadonn user-62=newstoda user-63=belle user-64=ggaaorgu user-65=skyfirec user-66=alexadmin user-67=stuartge user-68=askhform user-69=innovat1 user-70=nativene user-71=sibtoncc user-72=asandcoc user-73=zebrapho user-74=bwppodcast user-75=steve user-76=fawcettd user-77=burydropin user-78=nsceres user-79=darkstar user-80=eatspam user-81=beauty user-82=dhyana user-83=leftie user-84=foods user-85=health2045 user-86=fortunaz user-87=nscdp user-88=donnychicago user-89=firstre5 user-90=steakbridieme user-91=ctedorgu user-92=philmcph user-93=lkpier user-94=smrszyqg user-95=isleofwi user-96=tigerlet user-97=barbersh user-98=nomistakes user-99=hidden user-100=reliable user-101=ninejimm
Sep 21 03:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=cathski user-103=cambria1 user-104=cwsocial user-105=paulmca1 user-106=pugwash user-107=howardon user-108=hirefootballgame user-109=courseme user-110=eugincou user-111=tomandle user-112=jennimil user-113=mcdermos user-114=chrisdal user-115=david user-116=nbhavers user-117=careers user-118=lucy user-119=attlebor user-120=onlycont user-121=branko user-122=outdoorc user-123=ranxterc user-124=hodgsonmail user-125=romaldki user-126=nove user-127=boldover user-128=crrtipdl user-129=sosevalu user-130=bakery user-131=what user-132=tstardom user-133=oubpgvbx user-134=nvihkvu user-135=havantho user-136=cath user-137=sketchy user-138=kategilpin user-139=dancinggardener user-140=stagingerris user-141=ladburyp user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 03:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:45 nativespace-cdp sudo[389050]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:45 nativespace-cdp sudo[389055]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-x9BmCVrE36L6Ch7z.~
Sep 21 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:45 nativespace-cdp sudo[389059]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-x9BmCVrE36L6Ch7z.~'
Sep 21 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:45 nativespace-cdp sudo[389062]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-x9BmCVrE36L6Ch7z.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:45 nativespace-cdp sudo[389066]: pam_unix(sudo:session): session closed for user root
Sep 21 03:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 03:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:09:45 nativespace-cdp sudo[389069]: pam_unix(sudo:session): session closed for user root
Sep 21 03:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 03:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:10:03 nativespace-cdp sudo[389225]: pam_unix(sudo:session): session closed for user root
Sep 21 03:11:33 nativespace-cdp sshd[389762]: Connection closed by 159.100.136.21 port 32946 [preauth]
Sep 21 03:16:33 nativespace-cdp sshd[390964]: Connection closed by 159.100.136.21 port 42334 [preauth]
Sep 21 03:21:34 nativespace-cdp sshd[392625]: Connection closed by 159.100.136.21 port 51084 [preauth]
Sep 21 03:26:34 nativespace-cdp sshd[393616]: Connection closed by 159.100.136.21 port 60756 [preauth]
Sep 21 03:31:36 nativespace-cdp sshd[394717]: Connection closed by 159.100.136.21 port 41678 [preauth]
Sep 21 03:34:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 03:34:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 03:34:02 nativespace-cdp sudo[395567]: pam_unix(sudo:session): session closed for user root
Sep 21 03:36:33 nativespace-cdp sshd[396241]: Connection closed by 159.100.136.21 port 51208 [preauth]
Sep 21 03:41:33 nativespace-cdp sshd[397527]: Connection closed by 159.100.136.21 port 59200 [preauth]
Sep 21 03:46:33 nativespace-cdp sshd[398620]: Connection closed by 159.100.136.21 port 40360 [preauth]
Sep 21 03:51:33 nativespace-cdp sshd[400171]: Connection closed by 159.100.136.21 port 49622 [preauth]
Sep 21 03:56:36 nativespace-cdp sshd[401261]: Connection closed by 159.100.136.21 port 58630 [preauth]
Sep 21 04:01:37 nativespace-cdp sshd[402443]: Connection closed by 159.100.136.21 port 39318 [preauth]
Sep 21 04:06:33 nativespace-cdp sshd[403757]: Connection closed by 159.100.136.21 port 48364 [preauth]
Sep 21 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:37 nativespace-cdp sudo[404633]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:37 nativespace-cdp sudo[404636]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:39 nativespace-cdp sudo[404640]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:39 nativespace-cdp sudo[404647]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404650]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404667]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404671]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404674]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404677]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404680]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:42 nativespace-cdp sudo[404684]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 04:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:47 nativespace-cdp sudo[404698]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 04:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:48 nativespace-cdp sudo[404702]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=branko user-2=outdoorc user-3=hodgsonmail user-4=ranxterc user-5=romaldki user-6=lucy user-7=attlebor user-8=onlycont user-9=mcdermos user-10=chrisdal user-11=david user-12=careers user-13=nbhavers user-14=tomandle user-15=jennimil user-16=kategilpin user-17=dancinggardener user-18=stagingerris user-19=ladburyp user-20=design user-21=what user-22=tstardom user-23=oubpgvbx user-24=nvihkvu user-25=havantho user-26=sketchy user-27=cath user-28=crrtipdl user-29=sosevalu user-30=bakery user-31=nove user-32=boldover user-33=darkstar user-34=eatspam user-35=beauty user-36=dhyana user-37=fawcettd user-38=burydropin user-39=nsceres user-40=zebrapho user-41=bwppodcast user-42=steve user-43=sibtoncc user-44=asandcoc user-45=hirefootballgame user-46=courseme user-47=eugincou user-48=reliable
Sep 21 04:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ninejimm user-50=cathski user-51=cambria1 user-52=cwsocial user-53=pugwash user-54=paulmca1 user-55=howardon user-56=smrszyqg user-57=isleofwi user-58=barbersh user-59=tigerlet user-60=nomistakes user-61=hidden user-62=leftie user-63=foods user-64=fortunaz user-65=health2045 user-66=nscdp user-67=firstre5 user-68=steakbridieme user-69=donnychicago user-70=philmcph user-71=ctedorgu user-72=lkpier user-73=ianrayne user-74=accooper user-75=thqkgnbz user-76=connectedshoppin user-77=elecleis user-78=milloyco user-79=gilpin user-80=fetch user-81=carsinyo user-82=hubmaster user-83=costestimatorco user-84=clarkass user-85=firstrel user-86=highlegh user-87=southlon user-88=firstred user-89=firstres user-90=ultbcrra user-91=jonhartl user-92=seftvta user-93=opaiscyx user-94=coursemc user-95=askhform user-96=stuartge user-97=innovat1 user-98=nativene user-99=alexadmin user-100=skyfirec user-101=bedfords
Sep 21 04:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bemadonn user-103=newstoda user-104=ggaaorgu user-105=belle user-106=nstriton user-107=brighto1 user-108=oneoarco user-109=battlere user-110=vivienn1 user-111=firstre2 user-112=agproduc user-113=still user-114=leereyn1 user-115=stephani user-116=jarvisin user-117=theblack user-118=hodgesonweb user-119=spectrum user-120=ulsukarm user-121=booff user-122=markward user-123=foundation user-124=lbscrmod user-125=maflemin user-126=vantagep user-127=athenare user-128=connect9 user-129=hhdugcor user-130=lbhyisi user-131=magichat user-132=martsblo user-133=ptkxhsbt user-134=dickemery123 user-135=wilsonsw user-136=megacards user-137=musorguk user-138=brmrjxl user-139=lakesan1 user-140=atestord user-141=sarafoundation user-142=strathar feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 04:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 04:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:49 nativespace-cdp sudo[404707]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 04:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:49 nativespace-cdp sudo[404717]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2TuvIG0JmcYQd907.~
Sep 21 04:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:50 nativespace-cdp sudo[404720]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2TuvIG0JmcYQd907.~'
Sep 21 04:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:50 nativespace-cdp sudo[404723]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2TuvIG0JmcYQd907.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 04:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:50 nativespace-cdp sudo[404727]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 04:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:50 nativespace-cdp sudo[404731]: pam_unix(sudo:session): session closed for user root
Sep 21 04:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 04:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:09:52 nativespace-cdp sudo[404750]: pam_unix(sudo:session): session closed for user root
Sep 21 04:11:33 nativespace-cdp sshd[405298]: Connection closed by 159.100.136.21 port 56806 [preauth]
Sep 21 04:16:33 nativespace-cdp sshd[406287]: Connection closed by 159.100.136.21 port 36902 [preauth]
Sep 21 04:21:33 nativespace-cdp sshd[407938]: Connection closed by 159.100.136.21 port 45810 [preauth]
Sep 21 04:26:34 nativespace-cdp sshd[408925]: Connection closed by 159.100.136.21 port 54712 [preauth]
Sep 21 04:31:33 nativespace-cdp sshd[410044]: Connection closed by 159.100.136.21 port 35056 [preauth]
Sep 21 04:36:32 nativespace-cdp sshd[412050]: Connection closed by 159.100.136.21 port 43930 [preauth]
Sep 21 04:41:32 nativespace-cdp sshd[414930]: Connection closed by 159.100.136.21 port 53082 [preauth]
Sep 21 04:46:35 nativespace-cdp sshd[416294]: Connection closed by 159.100.136.21 port 33964 [preauth]
Sep 21 04:51:33 nativespace-cdp sshd[417609]: Connection closed by 159.100.136.21 port 43348 [preauth]
Sep 21 04:55:04 nativespace-cdp sshd[418403]: Invalid user test from 103.161.133.115 port 52992
Sep 21 04:55:04 nativespace-cdp sshd[418403]: input_userauth_request: invalid user test [preauth]
Sep 21 04:55:04 nativespace-cdp sshd[418403]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 04:55:04 nativespace-cdp sshd[418403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.133.115
Sep 21 04:55:06 nativespace-cdp sshd[418403]: Failed password for invalid user test from 103.161.133.115 port 52992 ssh2
Sep 21 04:55:06 nativespace-cdp sshd[418403]: Received disconnect from 103.161.133.115 port 52992:11: Bye Bye [preauth]
Sep 21 04:55:06 nativespace-cdp sshd[418403]: Disconnected from 103.161.133.115 port 52992 [preauth]
Sep 21 04:56:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 04:56:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:56:33 nativespace-cdp sshd[418676]: Connection closed by 159.100.136.21 port 52864 [preauth]
Sep 21 04:56:35 nativespace-cdp sudo[418675]: pam_unix(sudo:session): session closed for user root
Sep 21 04:56:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 04:56:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:56:35 nativespace-cdp sudo[418687]: pam_unix(sudo:session): session closed for user root
Sep 21 04:56:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 04:56:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:56:40 nativespace-cdp sudo[418699]: pam_unix(sudo:session): session closed for user root
Sep 21 04:56:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steakbridieme user-2=firstre5 user-3=donnychicago user-4=ctedorgu user-5=philmcph user-6=lkpier user-7=foods user-8=leftie user-9=fortunaz user-10=health2045 user-11=nscdp user-12=tigerlet user-13=barbersh user-14=nomistakes user-15=hidden user-16=smrszyqg user-17=isleofwi user-18=cwsocial user-19=paulmca1 user-20=howardon user-21=pugwash user-22=ninejimm user-23=reliable user-24=cathski user-25=cambria1 user-26=courseme user-27=eugincou user-28=hirefootballgame user-29=asandcoc user-30=sibtoncc user-31=steve user-32=zebrapho user-33=bwppodcast user-34=nsceres user-35=fawcettd user-36=burydropin user-37=dhyana user-38=darkstar user-39=eatspam user-40=beauty user-41=boldover user-42=nove user-43=crrtipdl user-44=sosevalu user-45=bakery user-46=nvihkvu user-47=havantho user-48=sketchy user-49=cath
Sep 21 04:56:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=what user-51=oubpgvbx user-52=tstardom user-53=design user-54=kategilpin user-55=stagingerris user-56=dancinggardener user-57=ladburyp user-58=jennimil user-59=tomandle user-60=david user-61=nbhavers user-62=careers user-63=mcdermos user-64=chrisdal user-65=onlycont user-66=lucy user-67=attlebor user-68=romaldki user-69=branko user-70=outdoorc user-71=hodgsonmail user-72=ranxterc user-73=atestord user-74=sarafoundation user-75=strathar user-76=brmrjxl user-77=lakesan1 user-78=megacards user-79=musorguk user-80=wilsonsw user-81=ptkxhsbt user-82=dickemery123 user-83=martsblo user-84=magichat user-85=hhdugcor user-86=lbhyisi user-87=lbscrmod user-88=maflemin user-89=vantagep user-90=athenare user-91=connect9 user-92=booff user-93=markward user-94=foundation user-95=ulsukarm user-96=theblack user-97=hodgesonweb user-98=spectrum user-99=jarvisin user-100=leereyn1 user-101=stephani user-102=agproduc
Sep 21 04:56:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=still user-104=oneoarco user-105=battlere user-106=vivienn1 user-107=firstre2 user-108=nstriton user-109=brighto1 user-110=bemadonn user-111=newstoda user-112=ggaaorgu user-113=belle user-114=bedfords user-115=alexadmin user-116=skyfirec user-117=nativene user-118=askhform user-119=stuartge user-120=innovat1 user-121=coursemc user-122=opaiscyx user-123=firstres user-124=ultbcrra user-125=jonhartl user-126=seftvta user-127=highlegh user-128=southlon user-129=firstred user-130=costestimatorco user-131=clarkass user-132=firstrel user-133=fetch user-134=carsinyo user-135=hubmaster user-136=elecleis user-137=gilpin user-138=milloyco user-139=thqkgnbz user-140=connectedshoppin user-141=ianrayne user-142=accooper feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 04:56:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 04:56:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:56:41 nativespace-cdp sudo[418705]: pam_unix(sudo:session): session closed for user root
Sep 21 04:56:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 21 04:56:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:56:43 nativespace-cdp sudo[418715]: pam_unix(sudo:session): session closed for user root
Sep 21 04:56:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 21 04:56:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:56:43 nativespace-cdp sudo[418723]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 21 04:57:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:15 nativespace-cdp sudo[418958]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 21 04:57:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:16 nativespace-cdp sudo[418965]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 21 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:17 nativespace-cdp sudo[418973]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 21 04:57:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:19 nativespace-cdp sudo[418978]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 21 04:57:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:20 nativespace-cdp sudo[418987]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 21 04:57:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:22 nativespace-cdp sudo[419000]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 21 04:57:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:26 nativespace-cdp sudo[419008]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 21 04:57:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:26 nativespace-cdp sudo[419021]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 21 04:57:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:27 nativespace-cdp sudo[419026]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 21 04:57:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:30 nativespace-cdp sudo[419093]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:33 nativespace-cdp sudo[419148]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 21 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 21 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 21 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:34 nativespace-cdp sudo[419154]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 21 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 21 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 21 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:35 nativespace-cdp sudo[419163]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 21 04:57:35 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 21 04:57:35 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 21 04:57:35 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:57:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:37 nativespace-cdp sudo[419173]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:46 nativespace-cdp sudo[419287]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:46 nativespace-cdp sudo[419293]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:46 nativespace-cdp sudo[419301]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 21 04:57:46 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 04:57:46 nativespace-cdp sudo[419307]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 04:57:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 21 04:57:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:48 nativespace-cdp sudo[419342]: pam_unix(sudo:session): session closed for user root
Sep 21 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 21 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:57:49 nativespace-cdp sudo[419349]: pam_unix(sudo:session): session closed for user root
Sep 21 04:58:50 nativespace-cdp sshd[419511]: Invalid user user from 197.5.145.121 port 10292
Sep 21 04:58:50 nativespace-cdp sshd[419511]: input_userauth_request: invalid user user [preauth]
Sep 21 04:58:50 nativespace-cdp sshd[419511]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 04:58:50 nativespace-cdp sshd[419511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.5.145.121
Sep 21 04:58:52 nativespace-cdp sshd[419511]: Failed password for invalid user user from 197.5.145.121 port 10292 ssh2
Sep 21 04:58:52 nativespace-cdp sshd[419511]: Received disconnect from 197.5.145.121 port 10292:11: Bye Bye [preauth]
Sep 21 04:58:52 nativespace-cdp sshd[419511]: Disconnected from 197.5.145.121 port 10292 [preauth]
Sep 21 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 21 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:14 nativespace-cdp sudo[419603]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 21 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:15 nativespace-cdp sudo[419609]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 21 04:59:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:15 nativespace-cdp sudo[419614]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 21 04:59:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:16 nativespace-cdp sudo[419620]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 21 04:59:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:16 nativespace-cdp sudo[419628]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 21 04:59:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:20 nativespace-cdp sudo[419649]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 21 04:59:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:20 nativespace-cdp sudo[419656]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 21 04:59:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 04:59:28 nativespace-cdp sudo[419721]: pam_unix(sudo:session): session closed for user root
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 04:59:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:31 nativespace-cdp sudo[419791]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:59:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:31 nativespace-cdp sudo[419797]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 21 04:59:31 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:59:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:49 nativespace-cdp sudo[419805]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 04:59:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:59 nativespace-cdp sudo[420047]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:59:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:59 nativespace-cdp sudo[420053]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 21 04:59:59 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 04:59:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 04:59:59 nativespace-cdp sudo[420059]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:00:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 21 05:00:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:02 nativespace-cdp sudo[420096]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 21 05:00:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:02 nativespace-cdp sudo[420219]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:16 nativespace-cdp sshd[420307]: Invalid user sopuser from 103.161.133.115 port 33086
Sep 21 05:00:16 nativespace-cdp sshd[420307]: input_userauth_request: invalid user sopuser [preauth]
Sep 21 05:00:16 nativespace-cdp sshd[420307]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 05:00:16 nativespace-cdp sshd[420307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.133.115
Sep 21 05:00:18 nativespace-cdp sshd[420307]: Failed password for invalid user sopuser from 103.161.133.115 port 33086 ssh2
Sep 21 05:00:18 nativespace-cdp sshd[420307]: Received disconnect from 103.161.133.115 port 33086:11: Bye Bye [preauth]
Sep 21 05:00:18 nativespace-cdp sshd[420307]: Disconnected from 103.161.133.115 port 33086 [preauth]
Sep 21 05:00:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 21 05:00:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:00:26 nativespace-cdp sudo[420376]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:00:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 21 05:00:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:27 nativespace-cdp sudo[420382]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 21 05:00:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:27 nativespace-cdp sudo[420387]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 21 05:00:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:27 nativespace-cdp sudo[420392]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 21 05:00:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:28 nativespace-cdp sudo[420406]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 21 05:00:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:28 nativespace-cdp sudo[420411]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:36 nativespace-cdp sshd[420457]: Invalid user test from 197.5.145.121 port 10293
Sep 21 05:00:36 nativespace-cdp sshd[420457]: input_userauth_request: invalid user test [preauth]
Sep 21 05:00:36 nativespace-cdp sshd[420457]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 05:00:36 nativespace-cdp sshd[420457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.5.145.121
Sep 21 05:00:38 nativespace-cdp sshd[420457]: Failed password for invalid user test from 197.5.145.121 port 10293 ssh2
Sep 21 05:00:38 nativespace-cdp sshd[420457]: Received disconnect from 197.5.145.121 port 10293:11: Bye Bye [preauth]
Sep 21 05:00:38 nativespace-cdp sshd[420457]: Disconnected from 197.5.145.121 port 10293 [preauth]
Sep 21 05:00:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 21 05:00:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:00:44 nativespace-cdp sudo[420562]: pam_unix(sudo:session): session closed for user root
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 05:00:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:00:47 nativespace-cdp sudo[420620]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:00:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:00:47 nativespace-cdp sudo[420626]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 21 05:00:47 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:00:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:01:02 nativespace-cdp sudo[420632]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:01:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 21 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 21 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 21 05:01:02 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:01:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:01:04 nativespace-cdp sudo[420716]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:01:07 nativespace-cdp sshd[420720]: Invalid user user from 103.161.133.115 port 38468
Sep 21 05:01:07 nativespace-cdp sshd[420720]: input_userauth_request: invalid user user [preauth]
Sep 21 05:01:07 nativespace-cdp sshd[420720]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 05:01:07 nativespace-cdp sshd[420720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.133.115
Sep 21 05:01:10 nativespace-cdp sshd[420720]: Failed password for invalid user user from 103.161.133.115 port 38468 ssh2
Sep 21 05:01:10 nativespace-cdp sshd[420720]: Received disconnect from 103.161.133.115 port 38468:11: Bye Bye [preauth]
Sep 21 05:01:10 nativespace-cdp sshd[420720]: Disconnected from 103.161.133.115 port 38468 [preauth]
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 05:01:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:01:11 nativespace-cdp sudo[420867]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:01:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:01:11 nativespace-cdp sudo[420873]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:01:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:01:11 nativespace-cdp sudo[420879]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 21 05:01:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:01:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 05:01:11 nativespace-cdp sudo[420885]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 21 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:14 nativespace-cdp sudo[420919]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 21 05:01:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:14 nativespace-cdp sudo[420925]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 21 05:01:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:15 nativespace-cdp sudo[420943]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 21 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:15 nativespace-cdp sudo[420950]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 21 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 21 05:01:15 nativespace-cdp sudo[420963]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 21 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 21 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:16 nativespace-cdp sudo[420969]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 21 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:16 nativespace-cdp sudo[420975]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 21 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:16 nativespace-cdp sudo[420982]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:19 nativespace-cdp sshd[420997]: Invalid user tg from 197.5.145.121 port 10294
Sep 21 05:01:19 nativespace-cdp sshd[420997]: input_userauth_request: invalid user tg [preauth]
Sep 21 05:01:19 nativespace-cdp sshd[420997]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 05:01:19 nativespace-cdp sshd[420997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.5.145.121
Sep 21 05:01:21 nativespace-cdp sshd[420997]: Failed password for invalid user tg from 197.5.145.121 port 10294 ssh2
Sep 21 05:01:35 nativespace-cdp sshd[421098]: Connection closed by 159.100.136.21 port 33008 [preauth]
Sep 21 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 21 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:01:42 nativespace-cdp sudo[421117]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 21 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:43 nativespace-cdp sudo[421124]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 21 05:01:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:43 nativespace-cdp sudo[421129]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 21 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:44 nativespace-cdp sudo[421143]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 21 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:01:48 nativespace-cdp sudo[421207]: pam_unix(sudo:session): session closed for user root
Sep 21 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:01:51 nativespace-cdp sudo[421263]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:01:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 21 05:01:51 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 21 05:01:51 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 21 05:01:51 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:01:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:01:52 nativespace-cdp sudo[421270]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:01:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 21 05:01:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 21 05:01:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 21 05:01:52 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:01:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:02:05 nativespace-cdp sudo[421277]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 21 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:02:11 nativespace-cdp sudo[421420]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:02:11 nativespace-cdp sudo[421426]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 21 05:02:11 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 21 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 05:02:11 nativespace-cdp sudo[421432]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 21 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:14 nativespace-cdp sudo[421470]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 21 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:14 nativespace-cdp sudo[421475]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 21 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 21 05:02:24 nativespace-cdp sudo[421529]: pam_unix(sudo:session): session closed for user fortunaz
Sep 21 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 21 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:24 nativespace-cdp sudo[421536]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 21 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:25 nativespace-cdp sudo[421542]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 21 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:25 nativespace-cdp sudo[421547]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 21 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:27 nativespace-cdp sudo[421563]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 21 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:28 nativespace-cdp sudo[421569]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 21 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:32 nativespace-cdp sudo[421793]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=steakbridieme WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 21 05:02:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:43 nativespace-cdp sudo[422043]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 21 05:02:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:49 nativespace-cdp sudo[422263]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422321]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422324]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422327]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422331]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422334]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422337]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422340]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422343]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422346]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422349]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422352]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422355]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422359]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422362]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422365]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422368]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422371]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422374]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422377]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422380]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422383]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422386]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422389]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422393]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422396]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422399]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:50 nativespace-cdp sudo[422402]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422405]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422408]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422411]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422414]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422417]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422421]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422424]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422427]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422430]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422433]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422436]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422439]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422442]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422445]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422448]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422451]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422454]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422457]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422460]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422463]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422466]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422469]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422472]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422475]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422478]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422481]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422484]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422487]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422490]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422493]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422497]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422500]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:51 nativespace-cdp sudo[422503]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422506]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422509]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422512]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422515]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422518]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422521]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422524]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422527]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422530]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422533]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422536]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422539]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422542]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422546]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422549]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422552]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422555]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422558]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422561]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422564]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422567]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422570]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422573]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422576]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422579]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422582]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422585]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422588]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422591]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422595]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422598]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:52 nativespace-cdp sudo[422601]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422604]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422607]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422610]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422613]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422616]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422619]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422622]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422626]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422629]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422632]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422635]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422638]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422641]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422644]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422647]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422650]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422653]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422656]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422659]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422662]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422665]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422668]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422671]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422674]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422677]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422680]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422684]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422687]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422690]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422693]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422696]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422699]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422702]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422706]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422709]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:53 nativespace-cdp sudo[422712]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422715]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422718]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422721]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422724]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422727]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422730]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422735]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422739]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422742]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422746]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422749]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422752]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422755]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422758]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422761]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422764]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422767]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422770]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422773]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422776]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422779]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422782]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422786]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422789]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422792]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422795]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422798]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422801]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422804]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422807]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422810]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422813]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422816]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422819]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422822]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422825]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422829]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422832]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:54 nativespace-cdp sudo[422835]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422838]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422841]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422844]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422847]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422851]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422854]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422857]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422860]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422863]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422866]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422869]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422872]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422875]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422878]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422881]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422884]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422887]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422891]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422894]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422897]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422900]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422903]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422906]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422909]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422912]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422915]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422918]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422922]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422925]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422929]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422932]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422935]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422938]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422941]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422945]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422948]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 21 05:02:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:55 nativespace-cdp sudo[422951]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422954]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422957]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422960]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422963]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422966]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422969]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422972]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422975]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422978]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422982]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422985]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422988]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422991]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422994]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[422997]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[423000]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[423003]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[423006]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[423009]: pam_unix(sudo:session): session closed for user root
Sep 21 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 21 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:02:56 nativespace-cdp sudo[423012]: pam_unix(sudo:session): session closed for user root
Sep 21 05:06:33 nativespace-cdp sshd[423850]: Connection closed by 159.100.136.21 port 42366 [preauth]
Sep 21 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:30 nativespace-cdp sudo[424311]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:30 nativespace-cdp sudo[424315]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:31 nativespace-cdp sudo[424319]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:31 nativespace-cdp sudo[424324]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424328]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424336]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424339]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424342]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424345]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424348]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 05:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:33 nativespace-cdp sudo[424351]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 05:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:40 nativespace-cdp sudo[424381]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 05:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:40 nativespace-cdp sudo[424385]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=steve user-4=bwppodcast user-5=zebrapho user-6=nsceres user-7=fawcettd user-8=burydropin user-9=dhyana user-10=beauty user-11=darkstar user-12=eatspam user-13=lkpier user-14=donnychicago user-15=firstre5 user-16=steakbridieme user-17=ctedorgu user-18=philmcph user-19=nscdp user-20=foods user-21=leftie user-22=health2045 user-23=fortunaz user-24=nomistakes user-25=hidden user-26=tigerlet user-27=barbersh user-28=isleofwi user-29=smrszyqg user-30=cwsocial user-31=paulmca1 user-32=pugwash user-33=howardon user-34=cathski user-35=cambria1 user-36=reliable user-37=ninejimm user-38=eugincou user-39=courseme user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=david user-44=nbhavers user-45=careers user-46=chrisdal user-47=mcdermos user-48=onlycont
Sep 21 05:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=attlebor user-51=romaldki user-52=ranxterc user-53=outdoorc user-54=hodgsonmail user-55=branko user-56=boldover user-57=nove user-58=bakery user-59=crrtipdl user-60=sosevalu user-61=havantho user-62=cath user-63=sketchy user-64=nvihkvu user-65=tstardom user-66=oubpgvbx user-67=what user-68=design user-69=dancinggardener user-70=stagingerris user-71=ladburyp user-72=kategilpin user-73=vantagep user-74=athenare user-75=connect9 user-76=lbscrmod user-77=maflemin user-78=markward user-79=booff user-80=foundation user-81=ulsukarm user-82=spectrum user-83=hodgesonweb user-84=theblack user-85=jarvisin user-86=stephani user-87=leereyn1 user-88=agproduc user-89=still user-90=strathar user-91=atestord user-92=sarafoundation user-93=brmrjxl user-94=lakesan1 user-95=megacards user-96=musorguk user-97=wilsonsw user-98=dickemery123 user-99=ptkxhsbt user-100=martsblo user-101=magichat user-102=hhdugcor
Sep 21 05:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lbhyisi user-104=coursemc user-105=opaiscyx user-106=ultbcrra user-107=jonhartl user-108=seftvta user-109=firstres user-110=firstred user-111=highlegh user-112=southlon user-113=clarkass user-114=firstrel user-115=costestimatorco user-116=hubmaster user-117=fetch user-118=carsinyo user-119=gilpin user-120=milloyco user-121=elecleis user-122=connectedshoppin user-123=thqkgnbz user-124=accooper user-125=ianrayne user-126=vivienn1 user-127=firstre2 user-128=oneoarco user-129=battlere user-130=nstriton user-131=brighto1 user-132=newstoda user-133=belle user-134=ggaaorgu user-135=bemadonn user-136=bedfords user-137=skyfirec user-138=alexadmin user-139=nativene user-140=innovat1 user-141=askhform user-142=stuartge feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 05:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 05:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:41 nativespace-cdp sudo[424389]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:41 nativespace-cdp sudo[424395]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-w1OlVrEKxUOXnI2V.~
Sep 21 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:41 nativespace-cdp sudo[424398]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-w1OlVrEKxUOXnI2V.~'
Sep 21 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:41 nativespace-cdp sudo[424401]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-w1OlVrEKxUOXnI2V.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:41 nativespace-cdp sudo[424405]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 05:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:41 nativespace-cdp sudo[424408]: pam_unix(sudo:session): session closed for user root
Sep 21 05:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 05:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 05:09:43 nativespace-cdp sudo[424475]: pam_unix(sudo:session): session closed for user root
Sep 21 05:11:33 nativespace-cdp sshd[424960]: Connection closed by 159.100.136.21 port 51584 [preauth]
Sep 21 05:16:33 nativespace-cdp sshd[425966]: Connection closed by 159.100.136.21 port 60442 [preauth]
Sep 21 05:21:33 nativespace-cdp sshd[427404]: Connection closed by 159.100.136.21 port 39374 [preauth]
Sep 21 05:26:33 nativespace-cdp sshd[428384]: Connection closed by 159.100.136.21 port 48946 [preauth]
Sep 21 05:31:33 nativespace-cdp sshd[429518]: Connection closed by 159.100.136.21 port 58040 [preauth]
Sep 21 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user oubpgvbx by (uid=0)
Sep 21 05:35:09 nativespace-cdp su[430512]: pam_unix(su:session): session closed for user oubpgvbx
Sep 21 05:36:33 nativespace-cdp sshd[430790]: Connection closed by 159.100.136.21 port 39112 [preauth]
Sep 21 05:41:34 nativespace-cdp sshd[431992]: Connection closed by 159.100.136.21 port 47860 [preauth]
Sep 21 05:46:33 nativespace-cdp sshd[433017]: Connection closed by 159.100.136.21 port 57110 [preauth]
Sep 21 05:51:33 nativespace-cdp sshd[434533]: Connection closed by 159.100.136.21 port 37504 [preauth]
Sep 21 05:56:35 nativespace-cdp sshd[436184]: Connection closed by 159.100.136.21 port 46214 [preauth]
Sep 21 06:01:33 nativespace-cdp sshd[437290]: Connection closed by 159.100.136.21 port 54916 [preauth]
Sep 21 06:06:34 nativespace-cdp sshd[438703]: Connection closed by 159.100.136.21 port 35656 [preauth]
Sep 21 06:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 06:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:31 nativespace-cdp sudo[439143]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 06:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:31 nativespace-cdp sudo[439146]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 06:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:32 nativespace-cdp sudo[439150]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:32 nativespace-cdp sudo[439155]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 06:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439159]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439179]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439182]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439185]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439188]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439191]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:34 nativespace-cdp sudo[439194]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 06:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:36 nativespace-cdp sudo[439203]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 06:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:36 nativespace-cdp sudo[439208]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bwppodcast user-2=zebrapho user-3=steve user-4=asandcoc user-5=sibtoncc user-6=beauty user-7=eatspam user-8=darkstar user-9=dhyana user-10=burydropin user-11=fawcettd user-12=nsceres user-13=smrszyqg user-14=isleofwi user-15=hidden user-16=nomistakes user-17=barbersh user-18=tigerlet user-19=nscdp user-20=health2045 user-21=fortunaz user-22=foods user-23=leftie user-24=lkpier user-25=philmcph user-26=ctedorgu user-27=firstre5 user-28=donnychicago user-29=steakbridieme user-30=hirefootballgame user-31=eugincou user-32=courseme user-33=cambria1 user-34=cathski user-35=ninejimm user-36=reliable user-37=howardon user-38=paulmca1 user-39=pugwash user-40=cwsocial user-41=chrisdal user-42=mcdermos user-43=careers user-44=nbhavers user-45=david user-46=tomandle user-47=jennimil user-48=outdoorc
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=hodgsonmail user-50=ranxterc user-51=branko user-52=romaldki user-53=attlebor user-54=lucy user-55=onlycont user-56=bakery user-57=sosevalu user-58=crrtipdl user-59=nove user-60=boldover user-61=ladburyp user-62=dancinggardener user-63=stagingerris user-64=kategilpin user-65=design user-66=oubpgvbx user-67=tstardom user-68=what user-69=sketchy user-70=cath user-71=havantho user-72=nvihkvu user-73=ulsukarm user-74=markward user-75=booff user-76=foundation user-77=connect9 user-78=athenare user-79=vantagep user-80=maflemin user-81=lbscrmod user-82=still user-83=agproduc user-84=stephani user-85=leereyn1 user-86=jarvisin user-87=spectrum user-88=hodgesonweb user-89=theblack user-90=wilsonsw user-91=musorguk user-92=megacards user-93=brmrjxl user-94=lakesan1 user-95=strathar user-96=sarafoundation user-97=atestord user-98=lbhyisi user-99=hhdugcor user-100=magichat user-101=martsblo user-102=dickemery123
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ptkxhsbt user-104=clarkass user-105=firstrel user-106=costestimatorco user-107=firstred user-108=southlon user-109=highlegh user-110=jonhartl user-111=seftvta user-112=ultbcrra user-113=firstres user-114=opaiscyx user-115=coursemc user-116=accooper user-117=ianrayne user-118=connectedshoppin user-119=thqkgnbz user-120=milloyco user-121=gilpin user-122=elecleis user-123=hubmaster user-124=carsinyo user-125=fetch user-126=bedfords user-127=belle user-128=ggaaorgu user-129=newstoda user-130=bemadonn user-131=brighto1 user-132=nstriton user-133=firstre2 user-134=vivienn1 user-135=battlere user-136=oneoarco user-137=innovat1 user-138=stuartge user-139=askhform user-140=nativene user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 06:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:36 nativespace-cdp sudo[439213]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 06:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:36 nativespace-cdp sudo[439220]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gpJ8KEdKOTq06xil.~
Sep 21 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:37 nativespace-cdp sudo[439224]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gpJ8KEdKOTq06xil.~'
Sep 21 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:37 nativespace-cdp sudo[439227]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gpJ8KEdKOTq06xil.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:37 nativespace-cdp sudo[439231]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:37 nativespace-cdp sudo[439234]: pam_unix(sudo:session): session closed for user root
Sep 21 06:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 06:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 06:09:38 nativespace-cdp sudo[439260]: pam_unix(sudo:session): session closed for user root
Sep 21 06:11:33 nativespace-cdp sshd[439818]: Connection closed by 159.100.136.21 port 44422 [preauth]
Sep 21 06:16:34 nativespace-cdp sshd[440896]: Connection closed by 159.100.136.21 port 53844 [preauth]
Sep 21 06:21:33 nativespace-cdp sshd[442219]: Connection closed by 159.100.136.21 port 34190 [preauth]
Sep 21 06:26:33 nativespace-cdp sshd[443202]: Connection closed by 159.100.136.21 port 43844 [preauth]
Sep 21 06:31:33 nativespace-cdp sshd[444247]: Connection closed by 159.100.136.21 port 53364 [preauth]
Sep 21 06:36:33 nativespace-cdp sshd[445637]: Connection closed by 159.100.136.21 port 34684 [preauth]
Sep 21 06:41:33 nativespace-cdp sshd[446776]: Connection closed by 159.100.136.21 port 44012 [preauth]
Sep 21 06:46:36 nativespace-cdp sshd[447870]: Connection closed by 159.100.136.21 port 53666 [preauth]
Sep 21 06:51:33 nativespace-cdp sshd[449032]: Connection closed by 159.100.136.21 port 34902 [preauth]
Sep 21 06:56:36 nativespace-cdp sshd[450318]: Connection closed by 159.100.136.21 port 43614 [preauth]
Sep 21 07:01:33 nativespace-cdp sshd[451429]: Connection closed by 159.100.136.21 port 51696 [preauth]
Sep 21 07:06:33 nativespace-cdp sshd[452825]: Connection closed by 159.100.136.21 port 60952 [preauth]
Sep 21 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 07:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:37 nativespace-cdp sudo[453303]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 07:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:37 nativespace-cdp sudo[453307]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 07:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:39 nativespace-cdp sudo[453312]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:39 nativespace-cdp sudo[453320]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453326]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 07:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453340]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 07:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453345]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 07:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453349]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 07:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453354]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 07:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453361]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 07:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:42 nativespace-cdp sudo[453366]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 07:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:47 nativespace-cdp sudo[453386]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 07:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:48 nativespace-cdp sudo[453393]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=brmrjxl user-5=lakesan1 user-6=atestord user-7=sarafoundation user-8=strathar user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=ptkxhsbt user-14=dickemery123 user-15=ulsukarm user-16=booff user-17=foundation user-18=markward user-19=lbscrmod user-20=maflemin user-21=vantagep user-22=athenare user-23=connect9 user-24=agproduc user-25=still user-26=leereyn1 user-27=stephani user-28=jarvisin user-29=hodgesonweb user-30=theblack user-31=spectrum user-32=bedfords user-33=bemadonn user-34=newstoda user-35=ggaaorgu user-36=belle user-37=nstriton user-38=brighto1 user-39=oneoarco user-40=battlere user-41=vivienn1 user-42=firstre2 user-43=askhform user-44=stuartge user-45=innovat1 user-46=nativene user-47=skyfirec user-48=alexadmin
Sep 21 07:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=costestimatorco user-50=firstrel user-51=clarkass user-52=highlegh user-53=southlon user-54=firstred user-55=firstres user-56=ultbcrra user-57=seftvta user-58=jonhartl user-59=coursemc user-60=opaiscyx user-61=ianrayne user-62=accooper user-63=thqkgnbz user-64=connectedshoppin user-65=elecleis user-66=gilpin user-67=milloyco user-68=fetch user-69=carsinyo user-70=hubmaster user-71=isleofwi user-72=smrszyqg user-73=tigerlet user-74=barbersh user-75=nomistakes user-76=hidden user-77=foods user-78=leftie user-79=health2045 user-80=fortunaz user-81=nscdp user-82=steakbridieme user-83=firstre5 user-84=donnychicago user-85=philmcph user-86=ctedorgu user-87=lkpier user-88=hirefootballgame user-89=courseme user-90=eugincou user-91=reliable user-92=ninejimm user-93=cathski user-94=cambria1 user-95=cwsocial user-96=howardon user-97=paulmca1 user-98=pugwash user-99=zebrapho user-100=bwppodcast user-101=steve
Sep 21 07:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=darkstar user-105=eatspam user-106=beauty user-107=dhyana user-108=fawcettd user-109=burydropin user-110=nsceres user-111=crrtipdl user-112=sosevalu user-113=bakery user-114=nove user-115=boldover user-116=kategilpin user-117=stagingerris user-118=dancinggardener user-119=ladburyp user-120=design user-121=what user-122=oubpgvbx user-123=tstardom user-124=nvihkvu user-125=havantho user-126=sketchy user-127=cath user-128=mcdermos user-129=chrisdal user-130=david user-131=careers user-132=nbhavers user-133=tomandle user-134=jennimil user-135=branko user-136=hodgsonmail user-137=outdoorc user-138=ranxterc user-139=romaldki user-140=lucy user-141=attlebor user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 07:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 07:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:49 nativespace-cdp sudo[453401]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 07:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:50 nativespace-cdp sudo[453408]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OvYZjL9StJi1IQ1Q.~
Sep 21 07:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:50 nativespace-cdp sudo[453413]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OvYZjL9StJi1IQ1Q.~'
Sep 21 07:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:50 nativespace-cdp sudo[453417]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-OvYZjL9StJi1IQ1Q.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 07:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:50 nativespace-cdp sudo[453423]: pam_unix(sudo:session): session closed for user root
Sep 21 07:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 07:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:09:50 nativespace-cdp sudo[453428]: pam_unix(sudo:session): session closed for user root
Sep 21 07:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 07:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 07:10:04 nativespace-cdp sudo[453584]: pam_unix(sudo:session): session closed for user root
Sep 21 07:11:33 nativespace-cdp sshd[454077]: Connection closed by 159.100.136.21 port 42354 [preauth]
Sep 21 07:16:33 nativespace-cdp sshd[455246]: Connection closed by 159.100.136.21 port 51906 [preauth]
Sep 21 07:21:35 nativespace-cdp sshd[456705]: Connection closed by 159.100.136.21 port 32840 [preauth]
Sep 21 07:26:34 nativespace-cdp sshd[457751]: Connection closed by 159.100.136.21 port 41888 [preauth]
Sep 21 07:31:33 nativespace-cdp sshd[458812]: Connection closed by 159.100.136.21 port 51100 [preauth]
Sep 21 07:36:36 nativespace-cdp sshd[460323]: Connection closed by 159.100.136.21 port 60604 [preauth]
Sep 21 07:41:33 nativespace-cdp sshd[461470]: Connection closed by 159.100.136.21 port 41226 [preauth]
Sep 21 07:43:21 nativespace-cdp sshd[461889]: Invalid user acer from 185.219.142.14 port 52356
Sep 21 07:43:21 nativespace-cdp sshd[461889]: input_userauth_request: invalid user acer [preauth]
Sep 21 07:43:21 nativespace-cdp sshd[461889]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:43:21 nativespace-cdp sshd[461889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.219.142.14
Sep 21 07:43:23 nativespace-cdp sshd[461889]: Failed password for invalid user acer from 185.219.142.14 port 52356 ssh2
Sep 21 07:43:23 nativespace-cdp sshd[461889]: Received disconnect from 185.219.142.14 port 52356:11: Bye Bye [preauth]
Sep 21 07:43:23 nativespace-cdp sshd[461889]: Disconnected from 185.219.142.14 port 52356 [preauth]
Sep 21 07:45:12 nativespace-cdp sshd[462311]: Invalid user ubuntu from 45.157.150.82 port 54102
Sep 21 07:45:12 nativespace-cdp sshd[462311]: input_userauth_request: invalid user ubuntu [preauth]
Sep 21 07:45:12 nativespace-cdp sshd[462311]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:45:12 nativespace-cdp sshd[462311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.82
Sep 21 07:45:15 nativespace-cdp sshd[462311]: Failed password for invalid user ubuntu from 45.157.150.82 port 54102 ssh2
Sep 21 07:45:15 nativespace-cdp sshd[462311]: Received disconnect from 45.157.150.82 port 54102:11: Bye Bye [preauth]
Sep 21 07:45:15 nativespace-cdp sshd[462311]: Disconnected from 45.157.150.82 port 54102 [preauth]
Sep 21 07:45:19 nativespace-cdp sshd[462335]: Invalid user nexus from 58.27.223.138 port 53860
Sep 21 07:45:19 nativespace-cdp sshd[462335]: input_userauth_request: invalid user nexus [preauth]
Sep 21 07:45:19 nativespace-cdp sshd[462335]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:45:19 nativespace-cdp sshd[462335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.27.223.138
Sep 21 07:45:19 nativespace-cdp sshd[462339]: Invalid user user from 103.144.245.15 port 42404
Sep 21 07:45:19 nativespace-cdp sshd[462339]: input_userauth_request: invalid user user [preauth]
Sep 21 07:45:19 nativespace-cdp sshd[462339]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:45:19 nativespace-cdp sshd[462339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.144.245.15
Sep 21 07:45:21 nativespace-cdp sshd[462335]: Failed password for invalid user nexus from 58.27.223.138 port 53860 ssh2
Sep 21 07:45:21 nativespace-cdp sshd[462335]: Received disconnect from 58.27.223.138 port 53860:11: Bye Bye [preauth]
Sep 21 07:45:21 nativespace-cdp sshd[462335]: Disconnected from 58.27.223.138 port 53860 [preauth]
Sep 21 07:45:21 nativespace-cdp sshd[462339]: Failed password for invalid user user from 103.144.245.15 port 42404 ssh2
Sep 21 07:45:22 nativespace-cdp sshd[462339]: Received disconnect from 103.144.245.15 port 42404:11: Bye Bye [preauth]
Sep 21 07:45:22 nativespace-cdp sshd[462339]: Disconnected from 103.144.245.15 port 42404 [preauth]
Sep 21 07:46:36 nativespace-cdp sshd[462733]: Connection closed by 159.100.136.21 port 50758 [preauth]
Sep 21 07:47:19 nativespace-cdp sshd[462918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.144.245.15  user=root
Sep 21 07:47:19 nativespace-cdp sshd[462918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 07:47:20 nativespace-cdp sshd[462925]: Invalid user sopuser from 185.219.142.14 port 52540
Sep 21 07:47:20 nativespace-cdp sshd[462925]: input_userauth_request: invalid user sopuser [preauth]
Sep 21 07:47:20 nativespace-cdp sshd[462925]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:47:20 nativespace-cdp sshd[462925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.219.142.14
Sep 21 07:47:21 nativespace-cdp sshd[462918]: Failed password for root from 103.144.245.15 port 39258 ssh2
Sep 21 07:47:21 nativespace-cdp sshd[462918]: Received disconnect from 103.144.245.15 port 39258:11: Bye Bye [preauth]
Sep 21 07:47:21 nativespace-cdp sshd[462918]: Disconnected from 103.144.245.15 port 39258 [preauth]
Sep 21 07:47:22 nativespace-cdp sshd[462925]: Failed password for invalid user sopuser from 185.219.142.14 port 52540 ssh2
Sep 21 07:47:22 nativespace-cdp sshd[462925]: Received disconnect from 185.219.142.14 port 52540:11: Bye Bye [preauth]
Sep 21 07:47:22 nativespace-cdp sshd[462925]: Disconnected from 185.219.142.14 port 52540 [preauth]
Sep 21 07:47:36 nativespace-cdp sshd[463078]: Invalid user nexus from 45.157.150.82 port 52860
Sep 21 07:47:36 nativespace-cdp sshd[463078]: input_userauth_request: invalid user nexus [preauth]
Sep 21 07:47:36 nativespace-cdp sshd[463078]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:47:36 nativespace-cdp sshd[463078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.82
Sep 21 07:47:39 nativespace-cdp sshd[463078]: Failed password for invalid user nexus from 45.157.150.82 port 52860 ssh2
Sep 21 07:47:39 nativespace-cdp sshd[463078]: Received disconnect from 45.157.150.82 port 52860:11: Bye Bye [preauth]
Sep 21 07:47:39 nativespace-cdp sshd[463078]: Disconnected from 45.157.150.82 port 52860 [preauth]
Sep 21 07:47:56 nativespace-cdp sshd[463171]: Invalid user user from 58.27.223.138 port 35900
Sep 21 07:47:56 nativespace-cdp sshd[463171]: input_userauth_request: invalid user user [preauth]
Sep 21 07:47:56 nativespace-cdp sshd[463171]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:47:56 nativespace-cdp sshd[463171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.27.223.138
Sep 21 07:47:57 nativespace-cdp sshd[463171]: Failed password for invalid user user from 58.27.223.138 port 35900 ssh2
Sep 21 07:47:59 nativespace-cdp sshd[463171]: Received disconnect from 58.27.223.138 port 35900:11: Bye Bye [preauth]
Sep 21 07:47:59 nativespace-cdp sshd[463171]: Disconnected from 58.27.223.138 port 35900 [preauth]
Sep 21 07:48:00 nativespace-cdp sshd[463249]: Invalid user sopuser from 103.144.245.15 port 54052
Sep 21 07:48:00 nativespace-cdp sshd[463249]: input_userauth_request: invalid user sopuser [preauth]
Sep 21 07:48:00 nativespace-cdp sshd[463249]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:48:00 nativespace-cdp sshd[463249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.144.245.15
Sep 21 07:48:03 nativespace-cdp sshd[463249]: Failed password for invalid user sopuser from 103.144.245.15 port 54052 ssh2
Sep 21 07:48:03 nativespace-cdp sshd[463249]: Received disconnect from 103.144.245.15 port 54052:11: Bye Bye [preauth]
Sep 21 07:48:03 nativespace-cdp sshd[463249]: Disconnected from 103.144.245.15 port 54052 [preauth]
Sep 21 07:48:07 nativespace-cdp sshd[463412]: Invalid user test from 185.219.142.14 port 52620
Sep 21 07:48:07 nativespace-cdp sshd[463412]: input_userauth_request: invalid user test [preauth]
Sep 21 07:48:07 nativespace-cdp sshd[463412]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:48:07 nativespace-cdp sshd[463412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.219.142.14
Sep 21 07:48:08 nativespace-cdp sshd[463412]: Failed password for invalid user test from 185.219.142.14 port 52620 ssh2
Sep 21 07:48:08 nativespace-cdp sshd[463412]: Received disconnect from 185.219.142.14 port 52620:11: Bye Bye [preauth]
Sep 21 07:48:08 nativespace-cdp sshd[463412]: Disconnected from 185.219.142.14 port 52620 [preauth]
Sep 21 07:48:24 nativespace-cdp sshd[463526]: Invalid user user from 45.157.150.82 port 37370
Sep 21 07:48:24 nativespace-cdp sshd[463526]: input_userauth_request: invalid user user [preauth]
Sep 21 07:48:24 nativespace-cdp sshd[463526]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:48:24 nativespace-cdp sshd[463526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.82
Sep 21 07:48:26 nativespace-cdp sshd[463526]: Failed password for invalid user user from 45.157.150.82 port 37370 ssh2
Sep 21 07:48:31 nativespace-cdp sshd[463526]: Received disconnect from 45.157.150.82 port 37370:11: Bye Bye [preauth]
Sep 21 07:48:31 nativespace-cdp sshd[463526]: Disconnected from 45.157.150.82 port 37370 [preauth]
Sep 21 07:48:41 nativespace-cdp sshd[463590]: Invalid user sopuser from 58.27.223.138 port 41848
Sep 21 07:48:41 nativespace-cdp sshd[463590]: input_userauth_request: invalid user sopuser [preauth]
Sep 21 07:48:41 nativespace-cdp sshd[463590]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 07:48:41 nativespace-cdp sshd[463590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.27.223.138
Sep 21 07:48:43 nativespace-cdp sshd[463590]: Failed password for invalid user sopuser from 58.27.223.138 port 41848 ssh2
Sep 21 07:48:43 nativespace-cdp sshd[463590]: Received disconnect from 58.27.223.138 port 41848:11: Bye Bye [preauth]
Sep 21 07:48:43 nativespace-cdp sshd[463590]: Disconnected from 58.27.223.138 port 41848 [preauth]
Sep 21 07:51:00 nativespace-cdp sshd[464130]: Connection closed by 23.126.62.36 port 35874 [preauth]
Sep 21 07:51:33 nativespace-cdp sshd[464374]: Connection closed by 159.100.136.21 port 59940 [preauth]
Sep 21 07:56:33 nativespace-cdp sshd[465434]: Connection closed by 159.100.136.21 port 41196 [preauth]
Sep 21 08:01:36 nativespace-cdp sshd[466603]: Connection closed by 159.100.136.21 port 49858 [preauth]
Sep 21 08:06:33 nativespace-cdp sshd[467947]: Connection closed by 159.100.136.21 port 58802 [preauth]
Sep 21 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:37 nativespace-cdp sudo[468701]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:37 nativespace-cdp sudo[468705]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:39 nativespace-cdp sudo[468710]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:39 nativespace-cdp sudo[468720]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:42 nativespace-cdp sudo[468726]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:43 nativespace-cdp sudo[468751]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:43 nativespace-cdp sudo[468757]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:43 nativespace-cdp sudo[468761]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:43 nativespace-cdp sudo[468766]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:43 nativespace-cdp sudo[468772]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 08:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:43 nativespace-cdp sudo[468777]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 08:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:45 nativespace-cdp sudo[468790]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 08:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:46 nativespace-cdp sudo[468796]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=bwppodcast user-4=zebrapho user-5=steve user-6=fawcettd user-7=burydropin user-8=nsceres user-9=beauty user-10=darkstar user-11=eatspam user-12=dhyana user-13=nscdp user-14=foods user-15=leftie user-16=health2045 user-17=fortunaz user-18=lkpier user-19=firstre5 user-20=donnychicago user-21=steakbridieme user-22=ctedorgu user-23=philmcph user-24=smrszyqg user-25=isleofwi user-26=nomistakes user-27=hidden user-28=tigerlet user-29=barbersh user-30=cathski user-31=cambria1 user-32=reliable user-33=ninejimm user-34=cwsocial user-35=paulmca1 user-36=howardon user-37=pugwash user-38=hirefootballgame user-39=eugincou user-40=courseme user-41=tomandle user-42=jennimil user-43=chrisdal user-44=mcdermos user-45=david user-46=nbhavers user-47=careers user-48=lucy
Sep 21 08:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=onlycont user-51=outdoorc user-52=ranxterc user-53=hodgsonmail user-54=branko user-55=romaldki user-56=nove user-57=boldover user-58=bakery user-59=crrtipdl user-60=sosevalu user-61=tstardom user-62=oubpgvbx user-63=what user-64=havantho user-65=cath user-66=sketchy user-67=nvihkvu user-68=stagingerris user-69=dancinggardener user-70=ladburyp user-71=kategilpin user-72=design user-73=booff user-74=markward user-75=foundation user-76=vantagep user-77=connect9 user-78=athenare user-79=lbscrmod user-80=maflemin user-81=ulsukarm user-82=jarvisin user-83=spectrum user-84=hodgesonweb user-85=theblack user-86=agproduc user-87=still user-88=stephani user-89=leereyn1 user-90=brmrjxl user-91=lakesan1 user-92=strathar user-93=atestord user-94=sarafoundation user-95=wilsonsw user-96=megacards user-97=musorguk user-98=martsblo user-99=dickemery123 user-100=ptkxhsbt user-101=hhdugcor user-102=lbhyisi
Sep 21 08:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=magichat user-104=ultbcrra user-105=seftvta user-106=jonhartl user-107=firstres user-108=opaiscyx user-109=coursemc user-110=firstrel user-111=clarkass user-112=costestimatorco user-113=firstred user-114=highlegh user-115=southlon user-116=gilpin user-117=milloyco user-118=elecleis user-119=hubmaster user-120=fetch user-121=carsinyo user-122=accooper user-123=ianrayne user-124=connectedshoppin user-125=thqkgnbz user-126=nstriton user-127=brighto1 user-128=vivienn1 user-129=firstre2 user-130=oneoarco user-131=battlere user-132=bedfords user-133=newstoda user-134=ggaaorgu user-135=belle user-136=bemadonn user-137=alexadmin user-138=skyfirec user-139=innovat1 user-140=stuartge user-141=askhform user-142=nativene feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 08:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:47 nativespace-cdp sudo[468803]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 08:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:47 nativespace-cdp sudo[468811]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6iu3kIutVTJO95G5.~
Sep 21 08:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:47 nativespace-cdp sudo[468816]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6iu3kIutVTJO95G5.~'
Sep 21 08:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:47 nativespace-cdp sudo[468820]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6iu3kIutVTJO95G5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 08:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:47 nativespace-cdp sudo[468827]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 08:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:48 nativespace-cdp sudo[468831]: pam_unix(sudo:session): session closed for user root
Sep 21 08:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 08:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 08:09:54 nativespace-cdp sudo[468862]: pam_unix(sudo:session): session closed for user root
Sep 21 08:11:33 nativespace-cdp sshd[469432]: Connection closed by 159.100.136.21 port 39340 [preauth]
Sep 21 08:16:33 nativespace-cdp sshd[470642]: Connection closed by 159.100.136.21 port 49012 [preauth]
Sep 21 08:21:36 nativespace-cdp sshd[472089]: Connection closed by 159.100.136.21 port 58086 [preauth]
Sep 21 08:26:34 nativespace-cdp sshd[473201]: Connection closed by 159.100.136.21 port 39066 [preauth]
Sep 21 08:31:34 nativespace-cdp sshd[474376]: Connection closed by 159.100.136.21 port 48336 [preauth]
Sep 21 08:36:36 nativespace-cdp sshd[475768]: Connection closed by 159.100.136.21 port 57458 [preauth]
Sep 21 08:41:34 nativespace-cdp sshd[476842]: Connection closed by 159.100.136.21 port 37942 [preauth]
Sep 21 08:46:33 nativespace-cdp sshd[477882]: Connection closed by 159.100.136.21 port 45634 [preauth]
Sep 21 08:51:33 nativespace-cdp sshd[479281]: Connection closed by 159.100.136.21 port 53468 [preauth]
Sep 21 08:56:33 nativespace-cdp sshd[480380]: Connection closed by 159.100.136.21 port 34052 [preauth]
Sep 21 09:01:35 nativespace-cdp sshd[481761]: Connection closed by 159.100.136.21 port 43212 [preauth]
Sep 21 09:06:33 nativespace-cdp sshd[483575]: Connection closed by 159.100.136.21 port 52654 [preauth]
Sep 21 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:37 nativespace-cdp sudo[484356]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:37 nativespace-cdp sudo[484362]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 09:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:39 nativespace-cdp sudo[484367]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 09:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:39 nativespace-cdp sudo[484381]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 09:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:42 nativespace-cdp sudo[484388]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:43 nativespace-cdp sudo[484404]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:43 nativespace-cdp sudo[484410]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:43 nativespace-cdp sudo[484414]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:43 nativespace-cdp sudo[484425]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:43 nativespace-cdp sudo[484433]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 09:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:43 nativespace-cdp sudo[484438]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 09:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:09:58 nativespace-cdp sudo[484493]: pam_unix(sudo:session): session closed for user root
Sep 21 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:00 nativespace-cdp sudo[484500]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=accooper user-2=ianrayne user-3=connectedshoppin user-4=thqkgnbz user-5=milloyco user-6=gilpin user-7=elecleis user-8=hubmaster user-9=carsinyo user-10=fetch user-11=firstrel user-12=clarkass user-13=costestimatorco user-14=firstred user-15=southlon user-16=highlegh user-17=jonhartl user-18=seftvta user-19=ultbcrra user-20=firstres user-21=opaiscyx user-22=coursemc user-23=innovat1 user-24=stuartge user-25=askhform user-26=nativene user-27=alexadmin user-28=skyfirec user-29=bedfords user-30=belle user-31=ggaaorgu user-32=newstoda user-33=bemadonn user-34=brighto1 user-35=nstriton user-36=firstre2 user-37=vivienn1 user-38=battlere user-39=oneoarco user-40=still user-41=agproduc user-42=stephani user-43=leereyn1 user-44=jarvisin user-45=spectrum user-46=hodgesonweb user-47=theblack
Sep 21 09:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=booff user-50=foundation user-51=markward user-52=athenare user-53=connect9 user-54=vantagep user-55=maflemin user-56=lbscrmod user-57=lbhyisi user-58=hhdugcor user-59=magichat user-60=martsblo user-61=dickemery123 user-62=ptkxhsbt user-63=wilsonsw user-64=musorguk user-65=megacards user-66=brmrjxl user-67=lakesan1 user-68=strathar user-69=sarafoundation user-70=atestord user-71=outdoorc user-72=hodgsonmail user-73=ranxterc user-74=branko user-75=romaldki user-76=attlebor user-77=lucy user-78=onlycont user-79=chrisdal user-80=mcdermos user-81=nbhavers user-82=careers user-83=david user-84=tomandle user-85=jennimil user-86=ladburyp user-87=dancinggardener user-88=stagingerris user-89=kategilpin user-90=design user-91=tstardom user-92=oubpgvbx user-93=what user-94=sketchy user-95=cath user-96=havantho user-97=nvihkvu user-98=bakery user-99=sosevalu user-100=crrtipdl user-101=nove
Sep 21 09:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=beauty user-104=eatspam user-105=darkstar user-106=dhyana user-107=burydropin user-108=fawcettd user-109=nsceres user-110=bwppodcast user-111=zebrapho user-112=steve user-113=sibtoncc user-114=asandcoc user-115=hirefootballgame user-116=eugincou user-117=courseme user-118=cathski user-119=cambria1 user-120=reliable user-121=ninejimm user-122=howardon user-123=paulmca1 user-124=pugwash user-125=cwsocial user-126=smrszyqg user-127=isleofwi user-128=hidden user-129=nomistakes user-130=barbersh user-131=tigerlet user-132=nscdp user-133=fortunaz user-134=health2045 user-135=leftie user-136=foods user-137=lkpier user-138=philmcph user-139=ctedorgu user-140=firstre5 user-141=donnychicago user-142=steakbridieme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 09:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 09:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:01 nativespace-cdp sudo[484511]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 09:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:02 nativespace-cdp sudo[484605]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hjMta3VD9BrJ6moq.~
Sep 21 09:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:02 nativespace-cdp sudo[484611]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hjMta3VD9BrJ6moq.~'
Sep 21 09:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:02 nativespace-cdp sudo[484615]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hjMta3VD9BrJ6moq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 09:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:02 nativespace-cdp sudo[484621]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 09:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:02 nativespace-cdp sudo[484626]: pam_unix(sudo:session): session closed for user root
Sep 21 09:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 09:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 09:10:04 nativespace-cdp sudo[484679]: pam_unix(sudo:session): session closed for user root
Sep 21 09:11:33 nativespace-cdp sshd[485006]: Connection closed by 159.100.136.21 port 33548 [preauth]
Sep 21 09:16:35 nativespace-cdp sshd[486217]: Connection closed by 159.100.136.21 port 43022 [preauth]
Sep 21 09:21:33 nativespace-cdp sshd[487682]: Connection closed by 159.100.136.21 port 52126 [preauth]
Sep 21 09:26:34 nativespace-cdp sshd[488753]: Connection closed by 159.100.136.21 port 33650 [preauth]
Sep 21 09:31:33 nativespace-cdp sshd[489944]: Connection closed by 159.100.136.21 port 42416 [preauth]
Sep 21 09:36:33 nativespace-cdp sshd[491372]: Connection closed by 159.100.136.21 port 51838 [preauth]
Sep 21 09:41:35 nativespace-cdp sshd[492545]: Connection closed by 159.100.136.21 port 32810 [preauth]
Sep 21 09:46:35 nativespace-cdp sshd[493769]: Connection closed by 159.100.136.21 port 41996 [preauth]
Sep 21 09:51:34 nativespace-cdp sshd[495173]: Connection closed by 159.100.136.21 port 51096 [preauth]
Sep 21 09:56:35 nativespace-cdp sshd[496235]: Connection closed by 159.100.136.21 port 60412 [preauth]
Sep 21 10:01:33 nativespace-cdp sshd[497513]: Connection closed by 159.100.136.21 port 41036 [preauth]
Sep 21 10:06:33 nativespace-cdp sshd[498993]: Connection closed by 159.100.136.21 port 50650 [preauth]
Sep 21 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:37 nativespace-cdp sudo[499613]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:37 nativespace-cdp sudo[499618]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 10:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:38 nativespace-cdp sudo[499623]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:39 nativespace-cdp sudo[499640]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 10:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499646]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499660]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499665]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499669]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499674]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499680]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 10:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:42 nativespace-cdp sudo[499685]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:50 nativespace-cdp sudo[499719]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:50 nativespace-cdp sudo[499725]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=megacards user-2=musorguk user-3=wilsonsw user-4=strathar user-5=atestord user-6=sarafoundation user-7=brmrjxl user-8=lakesan1 user-9=magichat user-10=hhdugcor user-11=lbhyisi user-12=dickemery123 user-13=ptkxhsbt user-14=martsblo user-15=ulsukarm user-16=vantagep user-17=athenare user-18=connect9 user-19=lbscrmod user-20=maflemin user-21=booff user-22=foundation user-23=markward user-24=stephani user-25=leereyn1 user-26=agproduc user-27=still user-28=spectrum user-29=theblack user-30=hodgesonweb user-31=jarvisin user-32=newstoda user-33=ggaaorgu user-34=belle user-35=bemadonn user-36=bedfords user-37=vivienn1 user-38=firstre2 user-39=oneoarco user-40=battlere user-41=nstriton user-42=brighto1 user-43=nativene user-44=innovat1 user-45=askhform user-46=stuartge user-47=alexadmin user-48=skyfirec
Sep 21 10:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstred user-50=highlegh user-51=southlon user-52=clarkass user-53=firstrel user-54=costestimatorco user-55=opaiscyx user-56=coursemc user-57=ultbcrra user-58=seftvta user-59=jonhartl user-60=firstres user-61=connectedshoppin user-62=thqkgnbz user-63=accooper user-64=ianrayne user-65=hubmaster user-66=fetch user-67=carsinyo user-68=gilpin user-69=milloyco user-70=elecleis user-71=nomistakes user-72=hidden user-73=tigerlet user-74=barbersh user-75=isleofwi user-76=smrszyqg user-77=lkpier user-78=firstre5 user-79=donnychicago user-80=steakbridieme user-81=ctedorgu user-82=philmcph user-83=nscdp user-84=leftie user-85=foods user-86=health2045 user-87=fortunaz user-88=eugincou user-89=courseme user-90=hirefootballgame user-91=cwsocial user-92=paulmca1 user-93=howardon user-94=pugwash user-95=cambria1 user-96=cathski user-97=reliable user-98=ninejimm user-99=steve user-100=bwppodcast user-101=zebrapho
Sep 21 10:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=dhyana user-105=beauty user-106=darkstar user-107=eatspam user-108=nsceres user-109=fawcettd user-110=burydropin user-111=bakery user-112=crrtipdl user-113=sosevalu user-114=boldover user-115=nove user-116=design user-117=stagingerris user-118=dancinggardener user-119=ladburyp user-120=kategilpin user-121=havantho user-122=sketchy user-123=cath user-124=nvihkvu user-125=tstardom user-126=oubpgvbx user-127=what user-128=david user-129=nbhavers user-130=careers user-131=chrisdal user-132=mcdermos user-133=jennimil user-134=tomandle user-135=romaldki user-136=ranxterc user-137=outdoorc user-138=hodgsonmail user-139=branko user-140=onlycont user-141=lucy user-142=attlebor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 10:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:51 nativespace-cdp sudo[499732]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 10:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:52 nativespace-cdp sudo[499741]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZU34nY5zXypUhCAU.~
Sep 21 10:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:52 nativespace-cdp sudo[499746]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZU34nY5zXypUhCAU.~'
Sep 21 10:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:52 nativespace-cdp sudo[499750]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZU34nY5zXypUhCAU.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 10:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:52 nativespace-cdp sudo[499756]: pam_unix(sudo:session): session closed for user root
Sep 21 10:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 10:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:09:52 nativespace-cdp sudo[499761]: pam_unix(sudo:session): session closed for user root
Sep 21 10:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 10:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 10:10:00 nativespace-cdp sudo[499794]: pam_unix(sudo:session): session closed for user root
Sep 21 10:11:33 nativespace-cdp sshd[500182]: Connection closed by 159.100.136.21 port 59264 [preauth]
Sep 21 10:16:33 nativespace-cdp sshd[501223]: Connection closed by 159.100.136.21 port 40076 [preauth]
Sep 21 10:21:33 nativespace-cdp sshd[502748]: Connection closed by 159.100.136.21 port 49510 [preauth]
Sep 21 10:26:33 nativespace-cdp sshd[504008]: Connection closed by 159.100.136.21 port 59316 [preauth]
Sep 21 10:27:44 nativespace-cdp sshd[504299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.98.52  user=david
Sep 21 10:27:47 nativespace-cdp sshd[504299]: Failed password for david from 163.172.98.52 port 49240 ssh2
Sep 21 10:27:50 nativespace-cdp sshd[504299]: Received disconnect from 163.172.98.52 port 49240:11: Bye Bye [preauth]
Sep 21 10:27:50 nativespace-cdp sshd[504299]: Disconnected from 163.172.98.52 port 49240 [preauth]
Sep 21 10:28:38 nativespace-cdp sshd[504510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.223.92.101  user=root
Sep 21 10:28:38 nativespace-cdp sshd[504510]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 10:28:41 nativespace-cdp sshd[504510]: Failed password for root from 102.223.92.101 port 47532 ssh2
Sep 21 10:28:41 nativespace-cdp sshd[504510]: Received disconnect from 102.223.92.101 port 47532:11: Bye Bye [preauth]
Sep 21 10:28:41 nativespace-cdp sshd[504510]: Disconnected from 102.223.92.101 port 47532 [preauth]
Sep 21 10:29:54 nativespace-cdp sshd[504846]: Invalid user admin from 14.63.221.137 port 50920
Sep 21 10:29:54 nativespace-cdp sshd[504846]: input_userauth_request: invalid user admin [preauth]
Sep 21 10:29:54 nativespace-cdp sshd[504846]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 10:29:54 nativespace-cdp sshd[504846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.137
Sep 21 10:29:55 nativespace-cdp sshd[504846]: Failed password for invalid user admin from 14.63.221.137 port 50920 ssh2
Sep 21 10:29:56 nativespace-cdp sshd[504846]: Received disconnect from 14.63.221.137 port 50920:11: Bye Bye [preauth]
Sep 21 10:29:56 nativespace-cdp sshd[504846]: Disconnected from 14.63.221.137 port 50920 [preauth]
Sep 21 10:31:36 nativespace-cdp sshd[505311]: Connection closed by 159.100.136.21 port 39840 [preauth]
Sep 21 10:31:47 nativespace-cdp sshd[505344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.151.175  user=root
Sep 21 10:31:47 nativespace-cdp sshd[505344]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 10:31:48 nativespace-cdp sshd[505344]: Failed password for root from 51.77.151.175 port 41910 ssh2
Sep 21 10:31:48 nativespace-cdp sshd[505344]: Received disconnect from 51.77.151.175 port 41910:11: Bye Bye [preauth]
Sep 21 10:31:48 nativespace-cdp sshd[505344]: Disconnected from 51.77.151.175 port 41910 [preauth]
Sep 21 10:32:58 nativespace-cdp sshd[505834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.98.52  user=root
Sep 21 10:32:58 nativespace-cdp sshd[505834]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 10:33:00 nativespace-cdp sshd[505834]: Failed password for root from 163.172.98.52 port 44336 ssh2
Sep 21 10:33:03 nativespace-cdp sshd[505834]: Received disconnect from 163.172.98.52 port 44336:11: Bye Bye [preauth]
Sep 21 10:33:03 nativespace-cdp sshd[505834]: Disconnected from 163.172.98.52 port 44336 [preauth]
Sep 21 10:33:18 nativespace-cdp sshd[505903]: Invalid user admin from 102.223.92.101 port 42044
Sep 21 10:33:18 nativespace-cdp sshd[505903]: input_userauth_request: invalid user admin [preauth]
Sep 21 10:33:18 nativespace-cdp sshd[505903]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 10:33:18 nativespace-cdp sshd[505903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.223.92.101
Sep 21 10:33:19 nativespace-cdp sshd[505907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.137  user=root
Sep 21 10:33:19 nativespace-cdp sshd[505907]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 10:33:20 nativespace-cdp sshd[505903]: Failed password for invalid user admin from 102.223.92.101 port 42044 ssh2
Sep 21 10:33:20 nativespace-cdp sshd[505903]: Received disconnect from 102.223.92.101 port 42044:11: Bye Bye [preauth]
Sep 21 10:33:20 nativespace-cdp sshd[505903]: Disconnected from 102.223.92.101 port 42044 [preauth]
Sep 21 10:33:21 nativespace-cdp sshd[505921]: Invalid user dev from 51.77.151.175 port 33578
Sep 21 10:33:21 nativespace-cdp sshd[505921]: input_userauth_request: invalid user dev [preauth]
Sep 21 10:33:21 nativespace-cdp sshd[505921]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 10:33:21 nativespace-cdp sshd[505921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.151.175
Sep 21 10:33:21 nativespace-cdp sshd[505907]: Failed password for root from 14.63.221.137 port 59164 ssh2
Sep 21 10:33:21 nativespace-cdp sshd[505907]: Received disconnect from 14.63.221.137 port 59164:11: Bye Bye [preauth]
Sep 21 10:33:21 nativespace-cdp sshd[505907]: Disconnected from 14.63.221.137 port 59164 [preauth]
Sep 21 10:33:23 nativespace-cdp sshd[505921]: Failed password for invalid user dev from 51.77.151.175 port 33578 ssh2
Sep 21 10:33:27 nativespace-cdp sshd[505921]: Received disconnect from 51.77.151.175 port 33578:11: Bye Bye [preauth]
Sep 21 10:33:27 nativespace-cdp sshd[505921]: Disconnected from 51.77.151.175 port 33578 [preauth]
Sep 21 10:34:03 nativespace-cdp sshd[506046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.151.175  user=root
Sep 21 10:34:03 nativespace-cdp sshd[506046]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 10:34:04 nativespace-cdp sshd[506052]: Invalid user adminftp from 163.172.98.52 port 57370
Sep 21 10:34:04 nativespace-cdp sshd[506052]: input_userauth_request: invalid user adminftp [preauth]
Sep 21 10:34:04 nativespace-cdp sshd[506052]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 10:34:04 nativespace-cdp sshd[506052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.98.52
Sep 21 10:34:05 nativespace-cdp sshd[506052]: Failed password for invalid user adminftp from 163.172.98.52 port 57370 ssh2
Sep 21 10:34:05 nativespace-cdp sshd[506052]: Received disconnect from 163.172.98.52 port 57370:11: Bye Bye [preauth]
Sep 21 10:34:05 nativespace-cdp sshd[506052]: Disconnected from 163.172.98.52 port 57370 [preauth]
Sep 21 10:34:05 nativespace-cdp sshd[506046]: Failed password for root from 51.77.151.175 port 46196 ssh2
Sep 21 10:34:05 nativespace-cdp sshd[506046]: Received disconnect from 51.77.151.175 port 46196:11: Bye Bye [preauth]
Sep 21 10:34:05 nativespace-cdp sshd[506046]: Disconnected from 51.77.151.175 port 46196 [preauth]
Sep 21 10:34:13 nativespace-cdp sshd[506079]: Invalid user bkp from 102.223.92.101 port 39994
Sep 21 10:34:13 nativespace-cdp sshd[506079]: input_userauth_request: invalid user bkp [preauth]
Sep 21 10:34:13 nativespace-cdp sshd[506079]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 10:34:13 nativespace-cdp sshd[506079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.223.92.101
Sep 21 10:34:14 nativespace-cdp sshd[506079]: Failed password for invalid user bkp from 102.223.92.101 port 39994 ssh2
Sep 21 10:34:58 nativespace-cdp sshd[506396]: Invalid user chris from 14.63.221.137 port 60396
Sep 21 10:34:58 nativespace-cdp sshd[506396]: input_userauth_request: invalid user chris [preauth]
Sep 21 10:34:58 nativespace-cdp sshd[506396]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 10:34:58 nativespace-cdp sshd[506396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.221.137
Sep 21 10:35:00 nativespace-cdp sshd[506396]: Failed password for invalid user chris from 14.63.221.137 port 60396 ssh2
Sep 21 10:35:01 nativespace-cdp sshd[506396]: Received disconnect from 14.63.221.137 port 60396:11: Bye Bye [preauth]
Sep 21 10:35:01 nativespace-cdp sshd[506396]: Disconnected from 14.63.221.137 port 60396 [preauth]
Sep 21 10:36:33 nativespace-cdp sshd[506858]: Connection closed by 159.100.136.21 port 49230 [preauth]
Sep 21 10:41:33 nativespace-cdp sshd[507961]: Connection closed by 159.100.136.21 port 58482 [preauth]
Sep 21 10:46:38 nativespace-cdp sshd[509107]: Connection closed by 159.100.136.21 port 39852 [preauth]
Sep 21 10:51:33 nativespace-cdp sshd[510779]: Connection closed by 159.100.136.21 port 48954 [preauth]
Sep 21 10:56:34 nativespace-cdp sshd[511864]: Connection closed by 159.100.136.21 port 58584 [preauth]
Sep 21 11:01:33 nativespace-cdp sshd[513082]: Connection closed by 159.100.136.21 port 39808 [preauth]
Sep 21 11:06:35 nativespace-cdp sshd[514711]: Connection closed by 159.100.136.21 port 49218 [preauth]
Sep 21 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:51 nativespace-cdp sudo[515381]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:52 nativespace-cdp sudo[515385]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:53 nativespace-cdp sudo[515390]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:53 nativespace-cdp sudo[515399]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515405]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515424]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515430]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515434]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515439]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515445]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:57 nativespace-cdp sudo[515451]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:59 nativespace-cdp sudo[515461]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:09:59 nativespace-cdp sudo[515468]: pam_unix(sudo:session): session closed for user root
Sep 21 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=innovat1 user-3=askhform user-4=stuartge user-5=skyfirec user-6=alexadmin user-7=newstoda user-8=belle user-9=ggaaorgu user-10=bemadonn user-11=bedfords user-12=vivienn1 user-13=firstre2 user-14=oneoarco user-15=battlere user-16=nstriton user-17=brighto1 user-18=connectedshoppin user-19=thqkgnbz user-20=accooper user-21=ianrayne user-22=hubmaster user-23=fetch user-24=carsinyo user-25=milloyco user-26=gilpin user-27=elecleis user-28=firstred user-29=highlegh user-30=southlon user-31=firstrel user-32=clarkass user-33=costestimatorco user-34=coursemc user-35=opaiscyx user-36=ultbcrra user-37=jonhartl user-38=seftvta user-39=firstres user-40=magichat user-41=hhdugcor user-42=lbhyisi user-43=dickemery123 user-44=ptkxhsbt user-45=martsblo user-46=megacards user-47=musorguk
Sep 21 11:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=strathar user-50=atestord user-51=sarafoundation user-52=brmrjxl user-53=lakesan1 user-54=stephani user-55=leereyn1 user-56=agproduc user-57=still user-58=spectrum user-59=theblack user-60=hodgesonweb user-61=jarvisin user-62=ulsukarm user-63=vantagep user-64=athenare user-65=connect9 user-66=lbscrmod user-67=maflemin user-68=markward user-69=booff user-70=foundation user-71=design user-72=stagingerris user-73=dancinggardener user-74=ladburyp user-75=kategilpin user-76=havantho user-77=cath user-78=sketchy user-79=nvihkvu user-80=tstardom user-81=oubpgvbx user-82=what user-83=bakery user-84=crrtipdl user-85=sosevalu user-86=boldover user-87=nove user-88=romaldki user-89=outdoorc user-90=hodgsonmail user-91=ranxterc user-92=branko user-93=onlycont user-94=lucy user-95=attlebor user-96=david user-97=careers user-98=nbhavers user-99=chrisdal user-100=mcdermos user-101=jennimil
Sep 21 11:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=eugincou user-104=courseme user-105=hirefootballgame user-106=cwsocial user-107=howardon user-108=paulmca1 user-109=pugwash user-110=cathski user-111=cambria1 user-112=ninejimm user-113=reliable user-114=nomistakes user-115=hidden user-116=barbersh user-117=tigerlet user-118=smrszyqg user-119=isleofwi user-120=lkpier user-121=firstre5 user-122=donnychicago user-123=steakbridieme user-124=ctedorgu user-125=philmcph user-126=nscdp user-127=leftie user-128=foods user-129=health2045 user-130=fortunaz user-131=dhyana user-132=beauty user-133=darkstar user-134=eatspam user-135=nsceres user-136=fawcettd user-137=burydropin user-138=steve user-139=bwppodcast user-140=zebrapho user-141=asandcoc user-142=sibtoncc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 11:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:00 nativespace-cdp sudo[515474]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 21 11:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:02 nativespace-cdp sudo[515583]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 21 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 21 11:10:03 nativespace-cdp sudo[515615]: pam_unix(sudo:session): session closed for user onlycont
Sep 21 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 21 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:04 nativespace-cdp sudo[515637]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 21 11:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 11:10:04 nativespace-cdp sudo[515642]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 11:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 21 11:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:08 nativespace-cdp sudo[515682]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 21 11:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 21 11:10:08 nativespace-cdp sudo[515690]: pam_unix(sudo:session): session closed for user lkpier
Sep 21 11:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 21 11:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:09 nativespace-cdp sudo[515703]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 21 11:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 21 11:10:09 nativespace-cdp sudo[515708]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 21 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 21 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 21 11:10:10 nativespace-cdp sudo[515719]: pam_unix(sudo:session): session closed for user oneoarco
Sep 21 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 21 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:11 nativespace-cdp sudo[515732]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 21 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 21 11:10:11 nativespace-cdp sudo[515737]: pam_unix(sudo:session): session closed for user fortunaz
Sep 21 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 21 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:11 nativespace-cdp sudo[515749]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:11 nativespace-cdp sudo[515752]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 21 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:29 nativespace-cdp sudo[516639]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 21 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:29 nativespace-cdp sudo[516643]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:34 nativespace-cdp sudo[516658]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fD95OvKlWfxzw3m6.~
Sep 21 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:34 nativespace-cdp sudo[516662]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fD95OvKlWfxzw3m6.~'
Sep 21 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:34 nativespace-cdp sudo[516665]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fD95OvKlWfxzw3m6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:34 nativespace-cdp sudo[516669]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 11:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:34 nativespace-cdp sudo[516672]: pam_unix(sudo:session): session closed for user root
Sep 21 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 11:10:41 nativespace-cdp sudo[516696]: pam_unix(sudo:session): session closed for user root
Sep 21 11:11:33 nativespace-cdp sshd[516930]: Connection closed by 159.100.136.21 port 57734 [preauth]
Sep 21 11:16:33 nativespace-cdp sshd[518060]: Connection closed by 159.100.136.21 port 38814 [preauth]
Sep 21 11:21:33 nativespace-cdp sshd[519265]: Connection closed by 159.100.136.21 port 48010 [preauth]
Sep 21 11:26:33 nativespace-cdp sshd[520617]: Connection closed by 159.100.136.21 port 57426 [preauth]
Sep 21 11:31:36 nativespace-cdp sshd[521871]: Connection closed by 159.100.136.21 port 38380 [preauth]
Sep 21 11:36:33 nativespace-cdp sshd[523335]: Connection closed by 159.100.136.21 port 47822 [preauth]
Sep 21 11:41:34 nativespace-cdp sshd[524504]: Connection closed by 159.100.136.21 port 56880 [preauth]
Sep 21 11:46:36 nativespace-cdp sshd[525678]: Connection closed by 159.100.136.21 port 37942 [preauth]
Sep 21 11:51:33 nativespace-cdp sshd[527350]: Connection closed by 159.100.136.21 port 47180 [preauth]
Sep 21 11:56:33 nativespace-cdp sshd[528446]: Connection closed by 159.100.136.21 port 56438 [preauth]
Sep 21 12:01:33 nativespace-cdp sshd[529665]: Connection closed by 159.100.136.21 port 37438 [preauth]
Sep 21 12:06:33 nativespace-cdp sshd[531234]: Connection closed by 159.100.136.21 port 46584 [preauth]
Sep 21 12:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 12:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:07 nativespace-cdp sudo[532031]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 12:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:07 nativespace-cdp sudo[532037]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 12:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:27 nativespace-cdp sudo[532040]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 12:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:27 nativespace-cdp sudo[532113]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 12:10:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:37 nativespace-cdp sudo[532116]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 12:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:38 nativespace-cdp sudo[532197]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 12:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:38 nativespace-cdp sudo[532204]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 12:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:38 nativespace-cdp sudo[532209]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 12:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:38 nativespace-cdp sudo[532214]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 12:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:38 nativespace-cdp sudo[532220]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 12:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:38 nativespace-cdp sudo[532225]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 12:10:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:51 nativespace-cdp sudo[532263]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 12:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:52 nativespace-cdp sudo[532269]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=nativene user-4=askhform user-5=stuartge user-6=innovat1 user-7=oneoarco user-8=battlere user-9=vivienn1 user-10=firstre2 user-11=nstriton user-12=brighto1 user-13=bemadonn user-14=newstoda user-15=ggaaorgu user-16=belle user-17=bedfords user-18=fetch user-19=carsinyo user-20=hubmaster user-21=elecleis user-22=milloyco user-23=gilpin user-24=thqkgnbz user-25=connectedshoppin user-26=ianrayne user-27=accooper user-28=coursemc user-29=opaiscyx user-30=firstres user-31=ultbcrra user-32=jonhartl user-33=seftvta user-34=highlegh user-35=southlon user-36=firstred user-37=costestimatorco user-38=clarkass user-39=firstrel user-40=ptkxhsbt user-41=dickemery123 user-42=martsblo user-43=magichat user-44=hhdugcor user-45=lbhyisi user-46=atestord user-47=sarafoundation
Sep 21 12:10:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=brmrjxl user-50=lakesan1 user-51=megacards user-52=musorguk user-53=wilsonsw user-54=hodgesonweb user-55=theblack user-56=spectrum user-57=jarvisin user-58=leereyn1 user-59=stephani user-60=agproduc user-61=still user-62=lbscrmod user-63=maflemin user-64=vantagep user-65=athenare user-66=connect9 user-67=markward user-68=booff user-69=foundation user-70=ulsukarm user-71=nvihkvu user-72=havantho user-73=sketchy user-74=cath user-75=what user-76=tstardom user-77=oubpgvbx user-78=design user-79=kategilpin user-80=stagingerris user-81=dancinggardener user-82=ladburyp user-83=boldover user-84=nove user-85=crrtipdl user-86=sosevalu user-87=bakery user-88=onlycont user-89=lucy user-90=attlebor user-91=romaldki user-92=branko user-93=hodgsonmail user-94=outdoorc user-95=ranxterc user-96=jennimil user-97=tomandle user-98=david user-99=careers user-100=nbhavers user-101=mcdermos user-102=chrisdal
Sep 21 12:10:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=cwsocial user-104=paulmca1 user-105=howardon user-106=pugwash user-107=ninejimm user-108=reliable user-109=cambria1 user-110=cathski user-111=courseme user-112=eugincou user-113=hirefootballgame user-114=firstre5 user-115=donnychicago user-116=steakbridieme user-117=ctedorgu user-118=philmcph user-119=lkpier user-120=foods user-121=leftie user-122=fortunaz user-123=health2045 user-124=nscdp user-125=barbersh user-126=tigerlet user-127=nomistakes user-128=hidden user-129=smrszyqg user-130=isleofwi user-131=nsceres user-132=fawcettd user-133=burydropin user-134=dhyana user-135=darkstar user-136=eatspam user-137=beauty user-138=sibtoncc user-139=asandcoc user-140=steve user-141=zebrapho user-142=bwppodcast feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 12:10:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 12:10:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:53 nativespace-cdp sudo[532276]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 12:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:54 nativespace-cdp sudo[532285]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kN16gQ6B2cW0aqYQ.~
Sep 21 12:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:54 nativespace-cdp sudo[532304]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kN16gQ6B2cW0aqYQ.~'
Sep 21 12:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:54 nativespace-cdp sudo[532308]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kN16gQ6B2cW0aqYQ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 12:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:54 nativespace-cdp sudo[532314]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 12:10:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:54 nativespace-cdp sudo[532319]: pam_unix(sudo:session): session closed for user root
Sep 21 12:10:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 12:10:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 12:10:56 nativespace-cdp sudo[532342]: pam_unix(sudo:session): session closed for user root
Sep 21 12:11:33 nativespace-cdp sshd[532445]: Connection closed by 159.100.136.21 port 55954 [preauth]
Sep 21 12:16:34 nativespace-cdp sshd[533661]: Connection closed by 159.100.136.21 port 37168 [preauth]
Sep 21 12:21:33 nativespace-cdp sshd[535158]: Connection closed by 159.100.136.21 port 46142 [preauth]
Sep 21 12:26:33 nativespace-cdp sshd[536210]: Connection closed by 159.100.136.21 port 55594 [preauth]
Sep 21 12:31:33 nativespace-cdp sshd[537374]: Connection closed by 159.100.136.21 port 36216 [preauth]
Sep 21 12:36:33 nativespace-cdp sshd[538922]: Connection closed by 159.100.136.21 port 45938 [preauth]
Sep 21 12:41:33 nativespace-cdp sshd[540069]: Connection closed by 159.100.136.21 port 55146 [preauth]
Sep 21 12:46:33 nativespace-cdp sshd[541254]: Connection closed by 159.100.136.21 port 36256 [preauth]
Sep 21 12:48:47 nativespace-cdp sshd[542128]: Invalid user steam from 103.188.177.46 port 60302
Sep 21 12:48:47 nativespace-cdp sshd[542128]: input_userauth_request: invalid user steam [preauth]
Sep 21 12:48:47 nativespace-cdp sshd[542128]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:48:47 nativespace-cdp sshd[542128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.188.177.46
Sep 21 12:48:49 nativespace-cdp sshd[542128]: Failed password for invalid user steam from 103.188.177.46 port 60302 ssh2
Sep 21 12:48:49 nativespace-cdp sshd[542128]: Received disconnect from 103.188.177.46 port 60302:11: Bye Bye [preauth]
Sep 21 12:48:49 nativespace-cdp sshd[542128]: Disconnected from 103.188.177.46 port 60302 [preauth]
Sep 21 12:51:33 nativespace-cdp sshd[542813]: Connection closed by 159.100.136.21 port 45016 [preauth]
Sep 21 12:51:42 nativespace-cdp sshd[542846]: Invalid user superman from 146.190.74.249 port 60904
Sep 21 12:51:42 nativespace-cdp sshd[542846]: input_userauth_request: invalid user superman [preauth]
Sep 21 12:51:42 nativespace-cdp sshd[542846]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:51:42 nativespace-cdp sshd[542846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.74.249
Sep 21 12:51:44 nativespace-cdp sshd[542846]: Failed password for invalid user superman from 146.190.74.249 port 60904 ssh2
Sep 21 12:51:45 nativespace-cdp sshd[542846]: Received disconnect from 146.190.74.249 port 60904:11: Bye Bye [preauth]
Sep 21 12:51:45 nativespace-cdp sshd[542846]: Disconnected from 146.190.74.249 port 60904 [preauth]
Sep 21 12:52:25 nativespace-cdp sshd[542980]: Invalid user odoo from 103.90.226.193 port 42102
Sep 21 12:52:25 nativespace-cdp sshd[542980]: input_userauth_request: invalid user odoo [preauth]
Sep 21 12:52:25 nativespace-cdp sshd[542980]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:52:25 nativespace-cdp sshd[542980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.226.193
Sep 21 12:52:27 nativespace-cdp sshd[542980]: Failed password for invalid user odoo from 103.90.226.193 port 42102 ssh2
Sep 21 12:52:27 nativespace-cdp sshd[542980]: Received disconnect from 103.90.226.193 port 42102:11: Bye Bye [preauth]
Sep 21 12:52:27 nativespace-cdp sshd[542980]: Disconnected from 103.90.226.193 port 42102 [preauth]
Sep 21 12:54:38 nativespace-cdp sshd[543442]: Invalid user jonathan from 146.190.74.249 port 47352
Sep 21 12:54:38 nativespace-cdp sshd[543442]: input_userauth_request: invalid user jonathan [preauth]
Sep 21 12:54:38 nativespace-cdp sshd[543442]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:54:38 nativespace-cdp sshd[543442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.74.249
Sep 21 12:54:40 nativespace-cdp sshd[543442]: Failed password for invalid user jonathan from 146.190.74.249 port 47352 ssh2
Sep 21 12:54:45 nativespace-cdp sshd[543442]: Received disconnect from 146.190.74.249 port 47352:11: Bye Bye [preauth]
Sep 21 12:54:45 nativespace-cdp sshd[543442]: Disconnected from 146.190.74.249 port 47352 [preauth]
Sep 21 12:55:18 nativespace-cdp sshd[543634]: Invalid user deploy from 146.190.74.249 port 48080
Sep 21 12:55:18 nativespace-cdp sshd[543634]: input_userauth_request: invalid user deploy [preauth]
Sep 21 12:55:18 nativespace-cdp sshd[543634]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:55:18 nativespace-cdp sshd[543634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.74.249
Sep 21 12:55:19 nativespace-cdp sshd[543636]: Invalid user superman from 103.90.226.193 port 45128
Sep 21 12:55:19 nativespace-cdp sshd[543636]: input_userauth_request: invalid user superman [preauth]
Sep 21 12:55:19 nativespace-cdp sshd[543636]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:55:19 nativespace-cdp sshd[543636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.226.193
Sep 21 12:55:20 nativespace-cdp sshd[543634]: Failed password for invalid user deploy from 146.190.74.249 port 48080 ssh2
Sep 21 12:55:20 nativespace-cdp sshd[543634]: Received disconnect from 146.190.74.249 port 48080:11: Bye Bye [preauth]
Sep 21 12:55:20 nativespace-cdp sshd[543634]: Disconnected from 146.190.74.249 port 48080 [preauth]
Sep 21 12:55:22 nativespace-cdp sshd[543636]: Failed password for invalid user superman from 103.90.226.193 port 45128 ssh2
Sep 21 12:55:22 nativespace-cdp sshd[543636]: Received disconnect from 103.90.226.193 port 45128:11: Bye Bye [preauth]
Sep 21 12:55:22 nativespace-cdp sshd[543636]: Disconnected from 103.90.226.193 port 45128 [preauth]
Sep 21 12:56:23 nativespace-cdp sshd[543844]: Connection closed by 103.90.226.193 port 59820 [preauth]
Sep 21 12:56:33 nativespace-cdp sshd[543884]: Connection closed by 159.100.136.21 port 54568 [preauth]
Sep 21 12:57:04 nativespace-cdp sshd[543980]: Invalid user test from 103.90.226.193 port 46276
Sep 21 12:57:04 nativespace-cdp sshd[543980]: input_userauth_request: invalid user test [preauth]
Sep 21 12:57:04 nativespace-cdp sshd[543980]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:57:04 nativespace-cdp sshd[543980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.90.226.193
Sep 21 12:57:06 nativespace-cdp sshd[543980]: Failed password for invalid user test from 103.90.226.193 port 46276 ssh2
Sep 21 12:57:09 nativespace-cdp sshd[543980]: Received disconnect from 103.90.226.193 port 46276:11: Bye Bye [preauth]
Sep 21 12:57:09 nativespace-cdp sshd[543980]: Disconnected from 103.90.226.193 port 46276 [preauth]
Sep 21 12:57:14 nativespace-cdp sshd[544074]: Invalid user usuario from 103.188.177.46 port 43668
Sep 21 12:57:14 nativespace-cdp sshd[544074]: input_userauth_request: invalid user usuario [preauth]
Sep 21 12:57:14 nativespace-cdp sshd[544074]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:57:14 nativespace-cdp sshd[544074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.188.177.46
Sep 21 12:57:16 nativespace-cdp sshd[544074]: Failed password for invalid user usuario from 103.188.177.46 port 43668 ssh2
Sep 21 12:57:16 nativespace-cdp sshd[544074]: Received disconnect from 103.188.177.46 port 43668:11: Bye Bye [preauth]
Sep 21 12:57:16 nativespace-cdp sshd[544074]: Disconnected from 103.188.177.46 port 43668 [preauth]
Sep 21 12:58:02 nativespace-cdp sshd[544195]: Invalid user test from 103.188.177.46 port 51014
Sep 21 12:58:02 nativespace-cdp sshd[544195]: input_userauth_request: invalid user test [preauth]
Sep 21 12:58:02 nativespace-cdp sshd[544195]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 12:58:02 nativespace-cdp sshd[544195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.188.177.46
Sep 21 12:58:04 nativespace-cdp sshd[544195]: Failed password for invalid user test from 103.188.177.46 port 51014 ssh2
Sep 21 12:58:04 nativespace-cdp sshd[544195]: Received disconnect from 103.188.177.46 port 51014:11: Bye Bye [preauth]
Sep 21 12:58:04 nativespace-cdp sshd[544195]: Disconnected from 103.188.177.46 port 51014 [preauth]
Sep 21 13:01:40 nativespace-cdp sshd[545290]: Did not receive identification string from 159.100.136.21 port 33574
Sep 21 13:06:37 nativespace-cdp sshd[547177]: Connection closed by 159.100.136.21 port 42254 [preauth]
Sep 21 13:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 13:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:39 nativespace-cdp sudo[548584]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 13:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:39 nativespace-cdp sudo[548589]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 13:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:41 nativespace-cdp sudo[548604]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 13:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:41 nativespace-cdp sudo[548612]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 13:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:45 nativespace-cdp sudo[548618]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 13:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:45 nativespace-cdp sudo[548665]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 13:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:45 nativespace-cdp sudo[548671]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 13:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:45 nativespace-cdp sudo[548675]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 13:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:46 nativespace-cdp sudo[548680]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 13:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:46 nativespace-cdp sudo[548686]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 13:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:46 nativespace-cdp sudo[548691]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 13:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:48 nativespace-cdp sudo[548717]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 13:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:49 nativespace-cdp sudo[548724]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=askhform user-3=stuartge user-4=innovat1 user-5=skyfirec user-6=alexadmin user-7=bemadonn user-8=newstoda user-9=belle user-10=ggaaorgu user-11=bedfords user-12=oneoarco user-13=battlere user-14=vivienn1 user-15=firstre2 user-16=nstriton user-17=brighto1 user-18=thqkgnbz user-19=connectedshoppin user-20=ianrayne user-21=accooper user-22=fetch user-23=carsinyo user-24=hubmaster user-25=elecleis user-26=milloyco user-27=gilpin user-28=highlegh user-29=southlon user-30=firstred user-31=costestimatorco user-32=clarkass user-33=firstrel user-34=opaiscyx user-35=coursemc user-36=firstres user-37=ultbcrra user-38=jonhartl user-39=seftvta user-40=magichat user-41=hhdugcor user-42=lbhyisi user-43=ptkxhsbt user-44=dickemery123 user-45=martsblo user-46=megacards user-47=musorguk
Sep 21 13:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=atestord user-50=sarafoundation user-51=strathar user-52=lakesan1 user-53=brmrjxl user-54=leereyn1 user-55=stephani user-56=agproduc user-57=still user-58=theblack user-59=hodgesonweb user-60=spectrum user-61=jarvisin user-62=ulsukarm user-63=lbscrmod user-64=maflemin user-65=vantagep user-66=athenare user-67=connect9 user-68=foundation user-69=booff user-70=markward user-71=design user-72=kategilpin user-73=dancinggardener user-74=stagingerris user-75=ladburyp user-76=nvihkvu user-77=havantho user-78=sketchy user-79=cath user-80=what user-81=oubpgvbx user-82=tstardom user-83=crrtipdl user-84=sosevalu user-85=bakery user-86=boldover user-87=nove user-88=romaldki user-89=branko user-90=hodgsonmail user-91=outdoorc user-92=ranxterc user-93=onlycont user-94=lucy user-95=attlebor user-96=david user-97=careers user-98=nbhavers user-99=mcdermos user-100=chrisdal user-101=jennimil
Sep 21 13:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=courseme user-104=eugincou user-105=hirefootballgame user-106=cwsocial user-107=pugwash user-108=paulmca1 user-109=howardon user-110=reliable user-111=ninejimm user-112=cambria1 user-113=cathski user-114=tigerlet user-115=barbersh user-116=nomistakes user-117=hidden user-118=smrszyqg user-119=isleofwi user-120=firstre5 user-121=steakbridieme user-122=donnychicago user-123=philmcph user-124=ctedorgu user-125=lkpier user-126=foods user-127=leftie user-128=fortunaz user-129=health2045 user-130=nscdp user-131=dhyana user-132=darkstar user-133=eatspam user-134=beauty user-135=nsceres user-136=fawcettd user-137=burydropin user-138=steve user-139=zebrapho user-140=bwppodcast user-141=asandcoc user-142=sibtoncc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 13:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 13:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:51 nativespace-cdp sudo[548734]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 13:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:51 nativespace-cdp sudo[548741]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-StiYrre7FZHJU2fy.~
Sep 21 13:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:51 nativespace-cdp sudo[548747]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-StiYrre7FZHJU2fy.~'
Sep 21 13:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:51 nativespace-cdp sudo[548751]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-StiYrre7FZHJU2fy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 13:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:51 nativespace-cdp sudo[548757]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 13:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:51 nativespace-cdp sudo[548763]: pam_unix(sudo:session): session closed for user root
Sep 21 13:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 13:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 13:09:54 nativespace-cdp sudo[548789]: pam_unix(sudo:session): session closed for user root
Sep 21 13:11:36 nativespace-cdp sshd[549684]: Connection closed by 159.100.136.21 port 50484 [preauth]
Sep 21 13:16:33 nativespace-cdp sshd[551886]: Connection closed by 159.100.136.21 port 59582 [preauth]
Sep 21 13:21:33 nativespace-cdp sshd[554734]: Connection closed by 159.100.136.21 port 40590 [preauth]
Sep 21 13:26:33 nativespace-cdp sshd[557402]: Connection closed by 159.100.136.21 port 49268 [preauth]
Sep 21 13:31:33 nativespace-cdp sshd[560209]: Connection closed by 159.100.136.21 port 58560 [preauth]
Sep 21 13:36:33 nativespace-cdp sshd[561696]: Connection closed by 159.100.136.21 port 39716 [preauth]
Sep 21 13:41:33 nativespace-cdp sshd[562919]: Connection closed by 159.100.136.21 port 48294 [preauth]
Sep 21 13:46:36 nativespace-cdp sshd[564088]: Connection closed by 159.100.136.21 port 57208 [preauth]
Sep 21 13:51:34 nativespace-cdp sshd[565538]: Connection closed by 159.100.136.21 port 37622 [preauth]
Sep 21 13:56:33 nativespace-cdp sshd[566753]: Connection closed by 159.100.136.21 port 46630 [preauth]
Sep 21 14:01:33 nativespace-cdp sshd[567960]: Connection closed by 159.100.136.21 port 56010 [preauth]
Sep 21 14:06:33 nativespace-cdp sshd[569563]: Connection closed by 159.100.136.21 port 37316 [preauth]
Sep 21 14:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 14:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:40 nativespace-cdp sudo[570207]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 14:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:40 nativespace-cdp sudo[570211]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 14:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:41 nativespace-cdp sudo[570217]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:41 nativespace-cdp sudo[570228]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570235]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570256]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570262]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570266]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570271]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570276]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 14:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:45 nativespace-cdp sudo[570283]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:53 nativespace-cdp sudo[570319]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:54 nativespace-cdp sudo[570325]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=boldover user-2=nove user-3=sosevalu user-4=crrtipdl user-5=bakery user-6=nvihkvu user-7=sketchy user-8=cath user-9=havantho user-10=what user-11=tstardom user-12=oubpgvbx user-13=design user-14=kategilpin user-15=ladburyp user-16=stagingerris user-17=dancinggardener user-18=jennimil user-19=tomandle user-20=careers user-21=nbhavers user-22=david user-23=mcdermos user-24=chrisdal user-25=onlycont user-26=attlebor user-27=lucy user-28=romaldki user-29=branko user-30=ranxterc user-31=outdoorc user-32=hodgsonmail user-33=ctedorgu user-34=philmcph user-35=firstre5 user-36=donnychicago user-37=steakbridieme user-38=lkpier user-39=health2045 user-40=fortunaz user-41=leftie user-42=foods user-43=nscdp user-44=barbersh user-45=tigerlet user-46=hidden user-47=nomistakes user-48=isleofwi user-49=smrszyqg
Sep 21 14:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=paulmca1 user-52=pugwash user-53=cwsocial user-54=ninejimm user-55=reliable user-56=cathski user-57=cambria1 user-58=courseme user-59=eugincou user-60=hirefootballgame user-61=asandcoc user-62=sibtoncc user-63=steve user-64=zebrapho user-65=bwppodcast user-66=nsceres user-67=burydropin user-68=fawcettd user-69=dhyana user-70=eatspam user-71=darkstar user-72=beauty user-73=battlere user-74=oneoarco user-75=firstre2 user-76=vivienn1 user-77=brighto1 user-78=nstriton user-79=bemadonn user-80=belle user-81=ggaaorgu user-82=newstoda user-83=bedfords user-84=alexadmin user-85=skyfirec user-86=nativene user-87=stuartge user-88=askhform user-89=innovat1 user-90=coursemc user-91=opaiscyx user-92=firstres user-93=seftvta user-94=jonhartl user-95=ultbcrra user-96=southlon user-97=highlegh user-98=firstred user-99=costestimatorco user-100=clarkass user-101=firstrel user-102=carsinyo user-103=fetch
Sep 21 14:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=hubmaster user-105=elecleis user-106=gilpin user-107=milloyco user-108=thqkgnbz user-109=connectedshoppin user-110=ianrayne user-111=accooper user-112=sarafoundation user-113=atestord user-114=strathar user-115=lakesan1 user-116=brmrjxl user-117=musorguk user-118=megacards user-119=wilsonsw user-120=ptkxhsbt user-121=dickemery123 user-122=martsblo user-123=magichat user-124=lbhyisi user-125=hhdugcor user-126=maflemin user-127=lbscrmod user-128=athenare user-129=connect9 user-130=vantagep user-131=booff user-132=foundation user-133=markward user-134=ulsukarm user-135=theblack user-136=hodgesonweb user-137=spectrum user-138=jarvisin user-139=leereyn1 user-140=stephani user-141=still user-142=agproduc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 14:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 14:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:55 nativespace-cdp sudo[570338]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:56 nativespace-cdp sudo[570351]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kEHll44QmiA4rP5U.~
Sep 21 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:56 nativespace-cdp sudo[570356]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kEHll44QmiA4rP5U.~'
Sep 21 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:56 nativespace-cdp sudo[570360]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kEHll44QmiA4rP5U.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:56 nativespace-cdp sudo[570366]: pam_unix(sudo:session): session closed for user root
Sep 21 14:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 14:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:09:56 nativespace-cdp sudo[570371]: pam_unix(sudo:session): session closed for user root
Sep 21 14:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 14:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 14:10:09 nativespace-cdp sudo[570542]: pam_unix(sudo:session): session closed for user root
Sep 21 14:11:33 nativespace-cdp sshd[570842]: Connection closed by 159.100.136.21 port 46590 [preauth]
Sep 21 14:16:33 nativespace-cdp sshd[572004]: Connection closed by 159.100.136.21 port 55196 [preauth]
Sep 21 14:21:33 nativespace-cdp sshd[573494]: Connection closed by 159.100.136.21 port 35840 [preauth]
Sep 21 14:26:33 nativespace-cdp sshd[574578]: Connection closed by 159.100.136.21 port 45108 [preauth]
Sep 21 14:30:05 nativespace-cdp sshd[575389]: Invalid user ubuntu from 45.83.140.205 port 40652
Sep 21 14:30:05 nativespace-cdp sshd[575389]: input_userauth_request: invalid user ubuntu [preauth]
Sep 21 14:30:05 nativespace-cdp sshd[575389]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 14:30:05 nativespace-cdp sshd[575389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.83.140.205
Sep 21 14:30:07 nativespace-cdp sshd[575389]: Failed password for invalid user ubuntu from 45.83.140.205 port 40652 ssh2
Sep 21 14:30:07 nativespace-cdp sshd[575389]: Received disconnect from 45.83.140.205 port 40652:11: Bye Bye [preauth]
Sep 21 14:30:07 nativespace-cdp sshd[575389]: Disconnected from 45.83.140.205 port 40652 [preauth]
Sep 21 14:31:33 nativespace-cdp sshd[575763]: Connection closed by 159.100.136.21 port 54160 [preauth]
Sep 21 14:31:38 nativespace-cdp sshd[575788]: Invalid user user from 45.83.140.205 port 34332
Sep 21 14:31:38 nativespace-cdp sshd[575788]: input_userauth_request: invalid user user [preauth]
Sep 21 14:31:38 nativespace-cdp sshd[575788]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 14:31:38 nativespace-cdp sshd[575788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.83.140.205
Sep 21 14:31:40 nativespace-cdp sshd[575788]: Failed password for invalid user user from 45.83.140.205 port 34332 ssh2
Sep 21 14:31:40 nativespace-cdp sshd[575788]: Received disconnect from 45.83.140.205 port 34332:11: Bye Bye [preauth]
Sep 21 14:31:40 nativespace-cdp sshd[575788]: Disconnected from 45.83.140.205 port 34332 [preauth]
Sep 21 14:32:17 nativespace-cdp sshd[575913]: Invalid user test_user from 45.83.140.205 port 42062
Sep 21 14:32:17 nativespace-cdp sshd[575913]: input_userauth_request: invalid user test_user [preauth]
Sep 21 14:32:17 nativespace-cdp sshd[575913]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 14:32:17 nativespace-cdp sshd[575913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.83.140.205
Sep 21 14:32:19 nativespace-cdp sshd[575913]: Failed password for invalid user test_user from 45.83.140.205 port 42062 ssh2
Sep 21 14:32:19 nativespace-cdp sshd[575913]: Received disconnect from 45.83.140.205 port 42062:11: Bye Bye [preauth]
Sep 21 14:32:19 nativespace-cdp sshd[575913]: Disconnected from 45.83.140.205 port 42062 [preauth]
Sep 21 14:36:35 nativespace-cdp sshd[577174]: Connection closed by 159.100.136.21 port 35144 [preauth]
Sep 21 14:41:33 nativespace-cdp sshd[578212]: Connection closed by 159.100.136.21 port 44138 [preauth]
Sep 21 14:46:33 nativespace-cdp sshd[579408]: Connection closed by 159.100.136.21 port 53690 [preauth]
Sep 21 14:51:33 nativespace-cdp sshd[580719]: Connection closed by 159.100.136.21 port 34598 [preauth]
Sep 21 14:56:33 nativespace-cdp sshd[581906]: Connection closed by 159.100.136.21 port 44186 [preauth]
Sep 21 15:01:33 nativespace-cdp sshd[583135]: Connection closed by 159.100.136.21 port 53356 [preauth]
Sep 21 15:06:33 nativespace-cdp sshd[584666]: Connection closed by 159.100.136.21 port 34572 [preauth]
Sep 21 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:36 nativespace-cdp sudo[585320]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:36 nativespace-cdp sudo[585325]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:37 nativespace-cdp sudo[585330]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 15:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:37 nativespace-cdp sudo[585338]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 15:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:40 nativespace-cdp sudo[585346]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 15:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:41 nativespace-cdp sudo[585362]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 15:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:41 nativespace-cdp sudo[585367]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 15:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:41 nativespace-cdp sudo[585371]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 15:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:41 nativespace-cdp sudo[585376]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 15:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:41 nativespace-cdp sudo[585384]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 15:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:41 nativespace-cdp sudo[585390]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:46 nativespace-cdp sudo[585408]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:46 nativespace-cdp sudo[585414]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hhdugcor user-2=lbhyisi user-3=magichat user-4=martsblo user-5=ptkxhsbt user-6=dickemery123 user-7=wilsonsw user-8=megacards user-9=musorguk user-10=lakesan1 user-11=brmrjxl user-12=atestord user-13=sarafoundation user-14=strathar user-15=agproduc user-16=still user-17=leereyn1 user-18=stephani user-19=jarvisin user-20=theblack user-21=hodgesonweb user-22=spectrum user-23=ulsukarm user-24=markward user-25=booff user-26=foundation user-27=lbscrmod user-28=maflemin user-29=vantagep user-30=connect9 user-31=athenare user-32=askhform user-33=stuartge user-34=innovat1 user-35=nativene user-36=alexadmin user-37=skyfirec user-38=bedfords user-39=bemadonn user-40=newstoda user-41=belle user-42=ggaaorgu user-43=nstriton user-44=brighto1 user-45=oneoarco user-46=battlere user-47=vivienn1 user-48=firstre2
Sep 21 15:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ianrayne user-50=accooper user-51=thqkgnbz user-52=connectedshoppin user-53=elecleis user-54=milloyco user-55=gilpin user-56=fetch user-57=carsinyo user-58=hubmaster user-59=costestimatorco user-60=firstrel user-61=clarkass user-62=highlegh user-63=southlon user-64=firstred user-65=firstres user-66=ultbcrra user-67=seftvta user-68=jonhartl user-69=opaiscyx user-70=coursemc user-71=hirefootballgame user-72=courseme user-73=eugincou user-74=ninejimm user-75=reliable user-76=cathski user-77=cambria1 user-78=cwsocial user-79=paulmca1 user-80=howardon user-81=pugwash user-82=isleofwi user-83=smrszyqg user-84=barbersh user-85=tigerlet user-86=nomistakes user-87=hidden user-88=foods user-89=leftie user-90=health2045 user-91=fortunaz user-92=nscdp user-93=firstre5 user-94=donnychicago user-95=steakbridieme user-96=philmcph user-97=ctedorgu user-98=lkpier user-99=darkstar user-100=eatspam user-101=beauty
Sep 21 15:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=fawcettd user-104=burydropin user-105=nsceres user-106=zebrapho user-107=bwppodcast user-108=steve user-109=asandcoc user-110=sibtoncc user-111=kategilpin user-112=dancinggardener user-113=stagingerris user-114=ladburyp user-115=design user-116=what user-117=tstardom user-118=oubpgvbx user-119=nvihkvu user-120=havantho user-121=sketchy user-122=cath user-123=crrtipdl user-124=sosevalu user-125=bakery user-126=nove user-127=boldover user-128=branko user-129=outdoorc user-130=hodgsonmail user-131=ranxterc user-132=romaldki user-133=lucy user-134=attlebor user-135=onlycont user-136=mcdermos user-137=chrisdal user-138=david user-139=nbhavers user-140=careers user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 15:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:47 nativespace-cdp sudo[585422]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:48 nativespace-cdp sudo[585430]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vz4dPQZ1XbPQ4BQi.~
Sep 21 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:48 nativespace-cdp sudo[585435]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vz4dPQZ1XbPQ4BQi.~'
Sep 21 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:48 nativespace-cdp sudo[585439]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Vz4dPQZ1XbPQ4BQi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:48 nativespace-cdp sudo[585445]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:48 nativespace-cdp sudo[585450]: pam_unix(sudo:session): session closed for user root
Sep 21 15:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 15:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 15:09:50 nativespace-cdp sudo[585473]: pam_unix(sudo:session): session closed for user root
Sep 21 15:11:33 nativespace-cdp sshd[585888]: Connection closed by 159.100.136.21 port 43816 [preauth]
Sep 21 15:16:33 nativespace-cdp sshd[587071]: Connection closed by 159.100.136.21 port 53108 [preauth]
Sep 21 15:21:33 nativespace-cdp sshd[588459]: Connection closed by 159.100.136.21 port 34046 [preauth]
Sep 21 15:26:35 nativespace-cdp sshd[589516]: Connection closed by 159.100.136.21 port 43240 [preauth]
Sep 21 15:31:33 nativespace-cdp sshd[590655]: Connection closed by 159.100.136.21 port 52582 [preauth]
Sep 21 15:36:33 nativespace-cdp sshd[592084]: Connection closed by 159.100.136.21 port 33622 [preauth]
Sep 21 15:41:33 nativespace-cdp sshd[593507]: Connection closed by 159.100.136.21 port 42332 [preauth]
Sep 21 15:46:33 nativespace-cdp sshd[594647]: Connection closed by 159.100.136.21 port 50650 [preauth]
Sep 21 15:51:33 nativespace-cdp sshd[596048]: Connection closed by 159.100.136.21 port 59386 [preauth]
Sep 21 15:56:33 nativespace-cdp sshd[597187]: Connection closed by 159.100.136.21 port 40868 [preauth]
Sep 21 16:01:33 nativespace-cdp sshd[598354]: Connection closed by 159.100.136.21 port 49856 [preauth]
Sep 21 16:06:33 nativespace-cdp sshd[599777]: Connection closed by 159.100.136.21 port 58822 [preauth]
Sep 21 16:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 16:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:33 nativespace-cdp sudo[600417]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 16:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:33 nativespace-cdp sudo[600421]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 16:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:34 nativespace-cdp sudo[600426]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 16:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:35 nativespace-cdp sudo[600434]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 16:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600440]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600456]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600461]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600465]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600470]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600475]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 16:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:37 nativespace-cdp sudo[600481]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 16:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:55 nativespace-cdp sudo[600648]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 16:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:55 nativespace-cdp sudo[600654]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=agproduc user-2=still user-3=leereyn1 user-4=stephani user-5=jarvisin user-6=theblack user-7=hodgesonweb user-8=spectrum user-9=ulsukarm user-10=booff user-11=markward user-12=foundation user-13=lbscrmod user-14=maflemin user-15=vantagep user-16=athenare user-17=connect9 user-18=hhdugcor user-19=lbhyisi user-20=magichat user-21=martsblo user-22=ptkxhsbt user-23=dickemery123 user-24=wilsonsw user-25=megacards user-26=musorguk user-27=brmrjxl user-28=lakesan1 user-29=atestord user-30=sarafoundation user-31=strathar user-32=ianrayne user-33=accooper user-34=thqkgnbz user-35=connectedshoppin user-36=elecleis user-37=milloyco user-38=gilpin user-39=fetch user-40=carsinyo user-41=hubmaster user-42=costestimatorco user-43=clarkass user-44=firstrel user-45=highlegh user-46=southlon user-47=firstred
Sep 21 16:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstres user-49=ultbcrra user-50=seftvta user-51=jonhartl user-52=opaiscyx user-53=coursemc user-54=askhform user-55=stuartge user-56=innovat1 user-57=nativene user-58=alexadmin user-59=skyfirec user-60=bedfords user-61=bemadonn user-62=newstoda user-63=belle user-64=ggaaorgu user-65=nstriton user-66=brighto1 user-67=oneoarco user-68=battlere user-69=vivienn1 user-70=firstre2 user-71=darkstar user-72=eatspam user-73=beauty user-74=dhyana user-75=fawcettd user-76=burydropin user-77=nsceres user-78=zebrapho user-79=bwppodcast user-80=steve user-81=asandcoc user-82=sibtoncc user-83=hirefootballgame user-84=courseme user-85=eugincou user-86=ninejimm user-87=reliable user-88=cathski user-89=cambria1 user-90=cwsocial user-91=pugwash user-92=paulmca1 user-93=howardon user-94=smrszyqg user-95=isleofwi user-96=tigerlet user-97=barbersh user-98=nomistakes user-99=hidden user-100=leftie user-101=foods
Sep 21 16:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=fortunaz user-103=health2045 user-104=nscdp user-105=firstre5 user-106=steakbridieme user-107=donnychicago user-108=ctedorgu user-109=philmcph user-110=lkpier user-111=branko user-112=outdoorc user-113=hodgsonmail user-114=ranxterc user-115=romaldki user-116=lucy user-117=attlebor user-118=onlycont user-119=mcdermos user-120=chrisdal user-121=david user-122=careers user-123=nbhavers user-124=tomandle user-125=jennimil user-126=kategilpin user-127=dancinggardener user-128=stagingerris user-129=ladburyp user-130=design user-131=what user-132=tstardom user-133=oubpgvbx user-134=nvihkvu user-135=havantho user-136=sketchy user-137=cath user-138=crrtipdl user-139=sosevalu user-140=bakery user-141=nove user-142=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 16:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 16:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:56 nativespace-cdp sudo[600664]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:57 nativespace-cdp sudo[600672]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4xFc3sEhWIt1xMGk.~
Sep 21 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:57 nativespace-cdp sudo[600677]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4xFc3sEhWIt1xMGk.~'
Sep 21 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:57 nativespace-cdp sudo[600681]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-4xFc3sEhWIt1xMGk.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:57 nativespace-cdp sudo[600687]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 16:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:57 nativespace-cdp sudo[600692]: pam_unix(sudo:session): session closed for user root
Sep 21 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 16:09:59 nativespace-cdp sudo[600724]: pam_unix(sudo:session): session closed for user root
Sep 21 16:11:33 nativespace-cdp sshd[601232]: Connection closed by 159.100.136.21 port 39704 [preauth]
Sep 21 16:16:33 nativespace-cdp sshd[602442]: Connection closed by 159.100.136.21 port 49138 [preauth]
Sep 21 16:21:35 nativespace-cdp sshd[603781]: Connection closed by 159.100.136.21 port 57108 [preauth]
Sep 21 16:26:36 nativespace-cdp sshd[605155]: Connection closed by 159.100.136.21 port 38058 [preauth]
Sep 21 16:31:36 nativespace-cdp sshd[606273]: Connection closed by 159.100.136.21 port 46448 [preauth]
Sep 21 16:36:33 nativespace-cdp sshd[607610]: Connection closed by 159.100.136.21 port 56302 [preauth]
Sep 21 16:41:33 nativespace-cdp sshd[608741]: Connection closed by 159.100.136.21 port 36562 [preauth]
Sep 21 16:46:34 nativespace-cdp sshd[609918]: Connection closed by 159.100.136.21 port 46260 [preauth]
Sep 21 16:51:33 nativespace-cdp sshd[611349]: Connection closed by 159.100.136.21 port 54948 [preauth]
Sep 21 16:56:33 nativespace-cdp sshd[612459]: Connection closed by 159.100.136.21 port 36140 [preauth]
Sep 21 17:01:33 nativespace-cdp sshd[613666]: Connection closed by 159.100.136.21 port 44702 [preauth]
Sep 21 17:06:36 nativespace-cdp sshd[615047]: Connection closed by 159.100.136.21 port 53014 [preauth]
Sep 21 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:33 nativespace-cdp sudo[615613]: pam_unix(sudo:session): session closed for user root
Sep 21 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:33 nativespace-cdp sudo[615617]: pam_unix(sudo:session): session closed for user root
Sep 21 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:34 nativespace-cdp sudo[615622]: pam_unix(sudo:session): session closed for user root
Sep 21 17:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 17:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:34 nativespace-cdp sudo[615633]: pam_unix(sudo:session): session closed for user root
Sep 21 17:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 17:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:59 nativespace-cdp sudo[615639]: pam_unix(sudo:session): session closed for user root
Sep 21 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:59 nativespace-cdp sudo[615713]: pam_unix(sudo:session): session closed for user root
Sep 21 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:09:59 nativespace-cdp sudo[615718]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:00 nativespace-cdp sudo[615722]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:00 nativespace-cdp sudo[615727]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:00 nativespace-cdp sudo[615732]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:00 nativespace-cdp sudo[615738]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 17:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:03 nativespace-cdp sudo[615871]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 17:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:03 nativespace-cdp sudo[615876]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nscdp user-2=health2045 user-3=fortunaz user-4=leftie user-5=foods user-6=lkpier user-7=ctedorgu user-8=philmcph user-9=firstre5 user-10=donnychicago user-11=steakbridieme user-12=isleofwi user-13=smrszyqg user-14=hidden user-15=nomistakes user-16=tigerlet user-17=barbersh user-18=cathski user-19=cambria1 user-20=ninejimm user-21=reliable user-22=pugwash user-23=paulmca1 user-24=howardon user-25=cwsocial user-26=hirefootballgame user-27=eugincou user-28=courseme user-29=sibtoncc user-30=asandcoc user-31=bwppodcast user-32=zebrapho user-33=steve user-34=burydropin user-35=fawcettd user-36=nsceres user-37=beauty user-38=eatspam user-39=darkstar user-40=dhyana user-41=nove user-42=boldover user-43=bakery user-44=sosevalu user-45=crrtipdl user-46=tstardom user-47=oubpgvbx user-48=what user-49=cath
Sep 21 17:10:03 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=sketchy user-51=havantho user-52=nvihkvu user-53=ladburyp user-54=stagingerris user-55=dancinggardener user-56=kategilpin user-57=design user-58=tomandle user-59=jennimil user-60=chrisdal user-61=mcdermos user-62=nbhavers user-63=careers user-64=david user-65=attlebor user-66=lucy user-67=onlycont user-68=outdoorc user-69=hodgsonmail user-70=ranxterc user-71=branko user-72=romaldki user-73=brmrjxl user-74=lakesan1 user-75=strathar user-76=sarafoundation user-77=atestord user-78=wilsonsw user-79=musorguk user-80=megacards user-81=martsblo user-82=dickemery123 user-83=ptkxhsbt user-84=lbhyisi user-85=hhdugcor user-86=magichat user-87=booff user-88=foundation user-89=markward user-90=athenare user-91=connect9 user-92=vantagep user-93=maflemin user-94=lbscrmod user-95=ulsukarm user-96=jarvisin user-97=spectrum user-98=hodgesonweb user-99=theblack user-100=still user-101=agproduc user-102=stephani
Sep 21 17:10:03 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=leereyn1 user-104=brighto1 user-105=nstriton user-106=firstre2 user-107=vivienn1 user-108=battlere user-109=oneoarco user-110=bedfords user-111=ggaaorgu user-112=belle user-113=newstoda user-114=bemadonn user-115=alexadmin user-116=skyfirec user-117=innovat1 user-118=askhform user-119=stuartge user-120=nativene user-121=jonhartl user-122=seftvta user-123=ultbcrra user-124=firstres user-125=coursemc user-126=opaiscyx user-127=clarkass user-128=firstrel user-129=costestimatorco user-130=firstred user-131=southlon user-132=highlegh user-133=milloyco user-134=gilpin user-135=elecleis user-136=hubmaster user-137=carsinyo user-138=fetch user-139=accooper user-140=ianrayne user-141=connectedshoppin user-142=thqkgnbz feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 17:10:03 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 17:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:04 nativespace-cdp sudo[615882]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:05 nativespace-cdp sudo[615890]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HBh5Ca5vB1eHIws8.~
Sep 21 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:05 nativespace-cdp sudo[615893]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HBh5Ca5vB1eHIws8.~'
Sep 21 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:05 nativespace-cdp sudo[615896]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-HBh5Ca5vB1eHIws8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:05 nativespace-cdp sudo[615900]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 17:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:05 nativespace-cdp sudo[615904]: pam_unix(sudo:session): session closed for user root
Sep 21 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 17:10:12 nativespace-cdp sudo[616017]: pam_unix(sudo:session): session closed for user root
Sep 21 17:11:36 nativespace-cdp sshd[616290]: Connection closed by 159.100.136.21 port 33668 [preauth]
Sep 21 17:16:33 nativespace-cdp sshd[617415]: Connection closed by 159.100.136.21 port 42676 [preauth]
Sep 21 17:21:33 nativespace-cdp sshd[618777]: Connection closed by 159.100.136.21 port 51624 [preauth]
Sep 21 17:26:33 nativespace-cdp sshd[619833]: Connection closed by 159.100.136.21 port 32974 [preauth]
Sep 21 17:31:33 nativespace-cdp sshd[620928]: Connection closed by 159.100.136.21 port 42482 [preauth]
Sep 21 17:36:34 nativespace-cdp sshd[622278]: Connection closed by 159.100.136.21 port 52024 [preauth]
Sep 21 17:41:33 nativespace-cdp sshd[623332]: Connection closed by 159.100.136.21 port 33278 [preauth]
Sep 21 17:46:33 nativespace-cdp sshd[624755]: Connection closed by 159.100.136.21 port 42694 [preauth]
Sep 21 17:51:34 nativespace-cdp sshd[626065]: Connection closed by 159.100.136.21 port 51686 [preauth]
Sep 21 17:56:35 nativespace-cdp sshd[627209]: Connection closed by 159.100.136.21 port 60984 [preauth]
Sep 21 18:01:33 nativespace-cdp sshd[628328]: Connection closed by 159.100.136.21 port 42118 [preauth]
Sep 21 18:06:34 nativespace-cdp sshd[629768]: Connection closed by 159.100.136.21 port 51686 [preauth]
Sep 21 18:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 18:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:34 nativespace-cdp sudo[630334]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 18:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:35 nativespace-cdp sudo[630338]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 18:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:36 nativespace-cdp sudo[630343]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:36 nativespace-cdp sudo[630350]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 18:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:38 nativespace-cdp sudo[630356]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:39 nativespace-cdp sudo[630372]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:39 nativespace-cdp sudo[630377]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:39 nativespace-cdp sudo[630381]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:39 nativespace-cdp sudo[630386]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:39 nativespace-cdp sudo[630391]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 18:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:39 nativespace-cdp sudo[630397]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:46 nativespace-cdp sudo[630426]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 18:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:47 nativespace-cdp sudo[630433]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bwppodcast user-2=zebrapho user-3=steve user-4=asandcoc user-5=sibtoncc user-6=beauty user-7=eatspam user-8=darkstar user-9=dhyana user-10=burydropin user-11=fawcettd user-12=nsceres user-13=isleofwi user-14=smrszyqg user-15=hidden user-16=nomistakes user-17=barbersh user-18=tigerlet user-19=nscdp user-20=fortunaz user-21=health2045 user-22=leftie user-23=foods user-24=lkpier user-25=ctedorgu user-26=philmcph user-27=firstre5 user-28=steakbridieme user-29=donnychicago user-30=hirefootballgame user-31=eugincou user-32=courseme user-33=cathski user-34=cambria1 user-35=ninejimm user-36=reliable user-37=paulmca1 user-38=pugwash user-39=howardon user-40=cwsocial user-41=chrisdal user-42=mcdermos user-43=careers user-44=nbhavers user-45=david user-46=tomandle user-47=jennimil user-48=ranxterc
Sep 21 18:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=outdoorc user-50=hodgsonmail user-51=branko user-52=romaldki user-53=attlebor user-54=lucy user-55=onlycont user-56=bakery user-57=sosevalu user-58=crrtipdl user-59=nove user-60=boldover user-61=ladburyp user-62=dancinggardener user-63=stagingerris user-64=kategilpin user-65=design user-66=oubpgvbx user-67=tstardom user-68=what user-69=sketchy user-70=cath user-71=havantho user-72=nvihkvu user-73=ulsukarm user-74=booff user-75=foundation user-76=markward user-77=connect9 user-78=athenare user-79=vantagep user-80=maflemin user-81=lbscrmod user-82=still user-83=agproduc user-84=stephani user-85=leereyn1 user-86=jarvisin user-87=spectrum user-88=hodgesonweb user-89=theblack user-90=wilsonsw user-91=musorguk user-92=megacards user-93=lakesan1 user-94=brmrjxl user-95=strathar user-96=sarafoundation user-97=atestord user-98=lbhyisi user-99=hhdugcor user-100=magichat user-101=martsblo user-102=dickemery123
Sep 21 18:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ptkxhsbt user-104=firstrel user-105=clarkass user-106=costestimatorco user-107=firstred user-108=southlon user-109=highlegh user-110=seftvta user-111=jonhartl user-112=ultbcrra user-113=firstres user-114=opaiscyx user-115=coursemc user-116=accooper user-117=ianrayne user-118=connectedshoppin user-119=thqkgnbz user-120=milloyco user-121=gilpin user-122=elecleis user-123=hubmaster user-124=carsinyo user-125=fetch user-126=bedfords user-127=belle user-128=ggaaorgu user-129=newstoda user-130=bemadonn user-131=brighto1 user-132=nstriton user-133=firstre2 user-134=vivienn1 user-135=battlere user-136=oneoarco user-137=innovat1 user-138=stuartge user-139=askhform user-140=nativene user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 18:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 18:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:47 nativespace-cdp sudo[630440]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:48 nativespace-cdp sudo[630448]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y5vmH5l5WO9FryNy.~
Sep 21 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:48 nativespace-cdp sudo[630454]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y5vmH5l5WO9FryNy.~'
Sep 21 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:48 nativespace-cdp sudo[630458]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y5vmH5l5WO9FryNy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:48 nativespace-cdp sudo[630464]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 18:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:48 nativespace-cdp sudo[630470]: pam_unix(sudo:session): session closed for user root
Sep 21 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 18:09:55 nativespace-cdp sudo[630503]: pam_unix(sudo:session): session closed for user root
Sep 21 18:11:33 nativespace-cdp sshd[631014]: Connection closed by 159.100.136.21 port 60450 [preauth]
Sep 21 18:16:34 nativespace-cdp sshd[632135]: Connection closed by 159.100.136.21 port 41466 [preauth]
Sep 21 18:21:33 nativespace-cdp sshd[633725]: Connection closed by 159.100.136.21 port 50520 [preauth]
Sep 21 18:26:33 nativespace-cdp sshd[634851]: Connection closed by 159.100.136.21 port 59750 [preauth]
Sep 21 18:27:47 nativespace-cdp sshd[635025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.180.89.135  user=root
Sep 21 18:27:47 nativespace-cdp sshd[635025]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 18:27:49 nativespace-cdp sshd[635025]: Failed password for root from 158.180.89.135 port 40188 ssh2
Sep 21 18:27:49 nativespace-cdp sshd[635025]: Received disconnect from 158.180.89.135 port 40188:11: Bye Bye [preauth]
Sep 21 18:27:49 nativespace-cdp sshd[635025]: Disconnected from 158.180.89.135 port 40188 [preauth]
Sep 21 18:29:07 nativespace-cdp sshd[635239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.185.5.6  user=root
Sep 21 18:29:07 nativespace-cdp sshd[635239]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 18:29:10 nativespace-cdp sshd[635239]: Failed password for root from 150.185.5.6 port 49246 ssh2
Sep 21 18:29:10 nativespace-cdp sshd[635239]: Received disconnect from 150.185.5.6 port 49246:11: Bye Bye [preauth]
Sep 21 18:29:10 nativespace-cdp sshd[635239]: Disconnected from 150.185.5.6 port 49246 [preauth]
Sep 21 18:31:34 nativespace-cdp sshd[635922]: Connection closed by 159.100.136.21 port 40966 [preauth]
Sep 21 18:32:03 nativespace-cdp sshd[635978]: Invalid user admin from 158.180.89.135 port 52518
Sep 21 18:32:03 nativespace-cdp sshd[635978]: input_userauth_request: invalid user admin [preauth]
Sep 21 18:32:03 nativespace-cdp sshd[635978]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 18:32:03 nativespace-cdp sshd[635978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.180.89.135
Sep 21 18:32:05 nativespace-cdp sshd[635978]: Failed password for invalid user admin from 158.180.89.135 port 52518 ssh2
Sep 21 18:32:05 nativespace-cdp sshd[635978]: Received disconnect from 158.180.89.135 port 52518:11: Bye Bye [preauth]
Sep 21 18:32:05 nativespace-cdp sshd[635978]: Disconnected from 158.180.89.135 port 52518 [preauth]
Sep 21 18:32:36 nativespace-cdp sshd[636217]: Invalid user admin from 150.185.5.6 port 34245
Sep 21 18:32:36 nativespace-cdp sshd[636217]: input_userauth_request: invalid user admin [preauth]
Sep 21 18:32:36 nativespace-cdp sshd[636217]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 18:32:36 nativespace-cdp sshd[636217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.185.5.6
Sep 21 18:32:38 nativespace-cdp sshd[636217]: Failed password for invalid user admin from 150.185.5.6 port 34245 ssh2
Sep 21 18:32:40 nativespace-cdp sshd[636217]: Received disconnect from 150.185.5.6 port 34245:11: Bye Bye [preauth]
Sep 21 18:32:40 nativespace-cdp sshd[636217]: Disconnected from 150.185.5.6 port 34245 [preauth]
Sep 21 18:32:43 nativespace-cdp sshd[636241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.185.5.6  user=root
Sep 21 18:32:43 nativespace-cdp sshd[636241]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 18:32:44 nativespace-cdp sshd[636241]: Failed password for root from 150.185.5.6 port 34983 ssh2
Sep 21 18:34:07 nativespace-cdp sshd[636655]: Invalid user admin from 158.180.89.135 port 49624
Sep 21 18:34:07 nativespace-cdp sshd[636655]: input_userauth_request: invalid user admin [preauth]
Sep 21 18:34:07 nativespace-cdp sshd[636655]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 18:34:07 nativespace-cdp sshd[636655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.180.89.135
Sep 21 18:34:08 nativespace-cdp sshd[636655]: Failed password for invalid user admin from 158.180.89.135 port 49624 ssh2
Sep 21 18:34:09 nativespace-cdp sshd[636655]: Received disconnect from 158.180.89.135 port 49624:11: Bye Bye [preauth]
Sep 21 18:34:09 nativespace-cdp sshd[636655]: Disconnected from 158.180.89.135 port 49624 [preauth]
Sep 21 18:36:35 nativespace-cdp sshd[637301]: Connection closed by 159.100.136.21 port 50854 [preauth]
Sep 21 18:41:34 nativespace-cdp sshd[638314]: Connection closed by 159.100.136.21 port 60430 [preauth]
Sep 21 18:46:33 nativespace-cdp sshd[639472]: Connection closed by 159.100.136.21 port 41862 [preauth]
Sep 21 18:51:33 nativespace-cdp sshd[640955]: Connection closed by 159.100.136.21 port 51118 [preauth]
Sep 21 18:56:33 nativespace-cdp sshd[642023]: Connection closed by 159.100.136.21 port 60862 [preauth]
Sep 21 19:01:33 nativespace-cdp sshd[643152]: Connection closed by 159.100.136.21 port 41832 [preauth]
Sep 21 19:06:33 nativespace-cdp sshd[644503]: Connection closed by 159.100.136.21 port 51430 [preauth]
Sep 21 19:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 19:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:34 nativespace-cdp sudo[645019]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 19:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:34 nativespace-cdp sudo[645024]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 19:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:35 nativespace-cdp sudo[645029]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 19:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:35 nativespace-cdp sudo[645036]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 19:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645042]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645054]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645059]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645063]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645068]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645074]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:37 nativespace-cdp sudo[645079]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 19:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:39 nativespace-cdp sudo[645091]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 19:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:40 nativespace-cdp sudo[645097]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=alexadmin user-2=skyfirec user-3=nativene user-4=askhform user-5=stuartge user-6=innovat1 user-7=oneoarco user-8=battlere user-9=vivienn1 user-10=firstre2 user-11=nstriton user-12=brighto1 user-13=bemadonn user-14=newstoda user-15=ggaaorgu user-16=belle user-17=bedfords user-18=fetch user-19=carsinyo user-20=hubmaster user-21=elecleis user-22=gilpin user-23=milloyco user-24=thqkgnbz user-25=connectedshoppin user-26=ianrayne user-27=accooper user-28=coursemc user-29=opaiscyx user-30=firstres user-31=ultbcrra user-32=seftvta user-33=jonhartl user-34=highlegh user-35=southlon user-36=firstred user-37=costestimatorco user-38=firstrel user-39=clarkass user-40=ptkxhsbt user-41=dickemery123 user-42=martsblo user-43=magichat user-44=hhdugcor user-45=lbhyisi user-46=atestord user-47=sarafoundation
Sep 21 19:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=brmrjxl user-50=lakesan1 user-51=megacards user-52=musorguk user-53=wilsonsw user-54=hodgesonweb user-55=theblack user-56=spectrum user-57=jarvisin user-58=leereyn1 user-59=stephani user-60=agproduc user-61=still user-62=lbscrmod user-63=maflemin user-64=vantagep user-65=athenare user-66=connect9 user-67=foundation user-68=booff user-69=markward user-70=ulsukarm user-71=nvihkvu user-72=havantho user-73=cath user-74=sketchy user-75=what user-76=tstardom user-77=oubpgvbx user-78=design user-79=kategilpin user-80=dancinggardener user-81=stagingerris user-82=ladburyp user-83=boldover user-84=nove user-85=crrtipdl user-86=sosevalu user-87=bakery user-88=onlycont user-89=lucy user-90=attlebor user-91=romaldki user-92=branko user-93=outdoorc user-94=hodgsonmail user-95=ranxterc user-96=jennimil user-97=tomandle user-98=david user-99=careers user-100=nbhavers user-101=mcdermos user-102=chrisdal
Sep 21 19:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=cwsocial user-104=pugwash user-105=paulmca1 user-106=howardon user-107=reliable user-108=ninejimm user-109=cathski user-110=cambria1 user-111=courseme user-112=eugincou user-113=hirefootballgame user-114=firstre5 user-115=steakbridieme user-116=donnychicago user-117=philmcph user-118=ctedorgu user-119=lkpier user-120=leftie user-121=foods user-122=fortunaz user-123=health2045 user-124=nscdp user-125=tigerlet user-126=barbersh user-127=nomistakes user-128=hidden user-129=isleofwi user-130=smrszyqg user-131=nsceres user-132=fawcettd user-133=burydropin user-134=dhyana user-135=darkstar user-136=eatspam user-137=beauty user-138=asandcoc user-139=sibtoncc user-140=steve user-141=zebrapho user-142=bwppodcast feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 19:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 19:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:40 nativespace-cdp sudo[645107]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:41 nativespace-cdp sudo[645119]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bjfB7J3i3yM3SNbn.~
Sep 21 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:41 nativespace-cdp sudo[645124]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bjfB7J3i3yM3SNbn.~'
Sep 21 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:41 nativespace-cdp sudo[645128]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bjfB7J3i3yM3SNbn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:41 nativespace-cdp sudo[645134]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:41 nativespace-cdp sudo[645139]: pam_unix(sudo:session): session closed for user root
Sep 21 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 19:09:42 nativespace-cdp sudo[645168]: pam_unix(sudo:session): session closed for user root
Sep 21 19:11:35 nativespace-cdp sshd[645713]: Connection closed by 159.100.136.21 port 60844 [preauth]
Sep 21 19:16:36 nativespace-cdp sshd[646791]: Connection closed by 159.100.136.21 port 42252 [preauth]
Sep 21 19:21:33 nativespace-cdp sshd[648145]: Connection closed by 159.100.136.21 port 51618 [preauth]
Sep 21 19:26:37 nativespace-cdp sshd[649385]: Connection closed by 159.100.136.21 port 33210 [preauth]
Sep 21 19:31:33 nativespace-cdp sshd[650648]: Connection closed by 159.100.136.21 port 42704 [preauth]
Sep 21 19:36:35 nativespace-cdp sshd[652089]: Connection closed by 159.100.136.21 port 52500 [preauth]
Sep 21 19:41:33 nativespace-cdp sshd[653100]: Connection closed by 159.100.136.21 port 33476 [preauth]
Sep 21 19:46:33 nativespace-cdp sshd[654265]: Connection closed by 159.100.136.21 port 43234 [preauth]
Sep 21 19:51:33 nativespace-cdp sshd[655704]: Connection closed by 159.100.136.21 port 52866 [preauth]
Sep 21 19:56:33 nativespace-cdp sshd[656790]: Connection closed by 159.100.136.21 port 34074 [preauth]
Sep 21 20:01:33 nativespace-cdp sshd[658147]: Connection closed by 159.100.136.21 port 43578 [preauth]
Sep 21 20:06:33 nativespace-cdp sshd[659607]: Connection closed by 159.100.136.21 port 53588 [preauth]
Sep 21 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:36 nativespace-cdp sudo[660358]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:36 nativespace-cdp sudo[660362]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:37 nativespace-cdp sudo[660367]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 20:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:37 nativespace-cdp sudo[660375]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 20:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660381]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660397]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660402]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660407]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660412]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660417]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:39 nativespace-cdp sudo[660424]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:41 nativespace-cdp sudo[660438]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:41 nativespace-cdp sudo[660446]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=eatspam user-2=darkstar user-3=beauty user-4=dhyana user-5=burydropin user-6=fawcettd user-7=nsceres user-8=zebrapho user-9=bwppodcast user-10=steve user-11=asandcoc user-12=sibtoncc user-13=hirefootballgame user-14=courseme user-15=eugincou user-16=ninejimm user-17=reliable user-18=cathski user-19=cambria1 user-20=howardon user-21=paulmca1 user-22=pugwash user-23=cwsocial user-24=smrszyqg user-25=isleofwi user-26=tigerlet user-27=barbersh user-28=hidden user-29=nomistakes user-30=fortunaz user-31=health2045 user-32=foods user-33=leftie user-34=nscdp user-35=philmcph user-36=ctedorgu user-37=firstre5 user-38=steakbridieme user-39=donnychicago user-40=lkpier user-41=branko user-42=outdoorc user-43=hodgsonmail user-44=ranxterc user-45=romaldki user-46=attlebor user-47=lucy user-48=onlycont
Sep 21 20:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=mcdermos user-50=chrisdal user-51=careers user-52=nbhavers user-53=david user-54=tomandle user-55=jennimil user-56=kategilpin user-57=ladburyp user-58=stagingerris user-59=dancinggardener user-60=design user-61=what user-62=oubpgvbx user-63=tstardom user-64=nvihkvu user-65=sketchy user-66=cath user-67=havantho user-68=sosevalu user-69=crrtipdl user-70=bakery user-71=nove user-72=boldover user-73=still user-74=agproduc user-75=leereyn1 user-76=stephani user-77=jarvisin user-78=hodgesonweb user-79=theblack user-80=spectrum user-81=ulsukarm user-82=markward user-83=booff user-84=foundation user-85=maflemin user-86=lbscrmod user-87=connect9 user-88=athenare user-89=vantagep user-90=lbhyisi user-91=hhdugcor user-92=magichat user-93=martsblo user-94=ptkxhsbt user-95=dickemery123 user-96=wilsonsw user-97=musorguk user-98=megacards user-99=lakesan1 user-100=brmrjxl user-101=sarafoundation user-102=atestord
Sep 21 20:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=strathar user-104=ianrayne user-105=accooper user-106=thqkgnbz user-107=connectedshoppin user-108=elecleis user-109=gilpin user-110=milloyco user-111=carsinyo user-112=fetch user-113=hubmaster user-114=costestimatorco user-115=clarkass user-116=firstrel user-117=southlon user-118=highlegh user-119=firstred user-120=firstres user-121=seftvta user-122=jonhartl user-123=ultbcrra user-124=opaiscyx user-125=coursemc user-126=stuartge user-127=askhform user-128=innovat1 user-129=nativene user-130=alexadmin user-131=skyfirec user-132=bedfords user-133=bemadonn user-134=belle user-135=ggaaorgu user-136=newstoda user-137=brighto1 user-138=nstriton user-139=battlere user-140=oneoarco user-141=firstre2 user-142=vivienn1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 20:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:42 nativespace-cdp sudo[660453]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:43 nativespace-cdp sudo[660462]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RoFww9R5RxOOgrEL.~
Sep 21 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:43 nativespace-cdp sudo[660467]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RoFww9R5RxOOgrEL.~'
Sep 21 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:43 nativespace-cdp sudo[660472]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-RoFww9R5RxOOgrEL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:43 nativespace-cdp sudo[660478]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 20:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:43 nativespace-cdp sudo[660484]: pam_unix(sudo:session): session closed for user root
Sep 21 20:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 20:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 20:09:44 nativespace-cdp sudo[660508]: pam_unix(sudo:session): session closed for user root
Sep 21 20:11:33 nativespace-cdp sshd[661068]: Connection closed by 159.100.136.21 port 34558 [preauth]
Sep 21 20:16:33 nativespace-cdp sshd[662141]: Connection closed by 159.100.136.21 port 44472 [preauth]
Sep 21 20:21:37 nativespace-cdp sshd[663487]: Connection closed by 159.100.136.21 port 53912 [preauth]
Sep 21 20:22:17 nativespace-cdp sshd[663606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.194.1  user=root
Sep 21 20:22:17 nativespace-cdp sshd[663606]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 20:22:19 nativespace-cdp sshd[663606]: Failed password for root from 128.199.194.1 port 46360 ssh2
Sep 21 20:22:19 nativespace-cdp sshd[663606]: Received disconnect from 128.199.194.1 port 46360:11: Bye Bye [preauth]
Sep 21 20:22:19 nativespace-cdp sshd[663606]: Disconnected from 128.199.194.1 port 46360 [preauth]
Sep 21 20:23:35 nativespace-cdp sshd[663848]: Invalid user ubuntu from 128.199.194.1 port 54840
Sep 21 20:23:35 nativespace-cdp sshd[663848]: input_userauth_request: invalid user ubuntu [preauth]
Sep 21 20:23:35 nativespace-cdp sshd[663848]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 20:23:35 nativespace-cdp sshd[663848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.194.1
Sep 21 20:23:37 nativespace-cdp sshd[663848]: Failed password for invalid user ubuntu from 128.199.194.1 port 54840 ssh2
Sep 21 20:23:37 nativespace-cdp sshd[663848]: Received disconnect from 128.199.194.1 port 54840:11: Bye Bye [preauth]
Sep 21 20:23:37 nativespace-cdp sshd[663848]: Disconnected from 128.199.194.1 port 54840 [preauth]
Sep 21 20:24:22 nativespace-cdp sshd[663984]: Invalid user sergio from 128.199.194.1 port 32968
Sep 21 20:24:22 nativespace-cdp sshd[663984]: input_userauth_request: invalid user sergio [preauth]
Sep 21 20:24:22 nativespace-cdp sshd[663984]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 20:24:22 nativespace-cdp sshd[663984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.194.1
Sep 21 20:24:24 nativespace-cdp sshd[663984]: Failed password for invalid user sergio from 128.199.194.1 port 32968 ssh2
Sep 21 20:24:24 nativespace-cdp sshd[663984]: Received disconnect from 128.199.194.1 port 32968:11: Bye Bye [preauth]
Sep 21 20:24:24 nativespace-cdp sshd[663984]: Disconnected from 128.199.194.1 port 32968 [preauth]
Sep 21 20:26:33 nativespace-cdp sshd[664615]: Connection closed by 159.100.136.21 port 35078 [preauth]
Sep 21 20:31:35 nativespace-cdp sshd[665691]: Connection closed by 159.100.136.21 port 43968 [preauth]
Sep 21 20:36:33 nativespace-cdp sshd[667055]: Connection closed by 159.100.136.21 port 53756 [preauth]
Sep 21 20:41:33 nativespace-cdp sshd[668328]: Connection closed by 159.100.136.21 port 34866 [preauth]
Sep 21 20:46:33 nativespace-cdp sshd[669516]: Connection closed by 159.100.136.21 port 44440 [preauth]
Sep 21 20:51:33 nativespace-cdp sshd[670955]: Connection closed by 159.100.136.21 port 54112 [preauth]
Sep 21 20:56:33 nativespace-cdp sshd[672125]: Connection closed by 159.100.136.21 port 35024 [preauth]
Sep 21 21:01:33 nativespace-cdp sshd[673380]: Connection closed by 159.100.136.21 port 44236 [preauth]
Sep 21 21:06:35 nativespace-cdp sshd[674802]: Connection closed by 159.100.136.21 port 53742 [preauth]
Sep 21 21:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 21:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:33 nativespace-cdp sudo[675306]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 21:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:33 nativespace-cdp sudo[675310]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:34 nativespace-cdp sudo[675316]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:34 nativespace-cdp sudo[675324]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675330]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675344]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675349]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675353]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675359]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675364]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:37 nativespace-cdp sudo[675370]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:45 nativespace-cdp sudo[675397]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 21:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:46 nativespace-cdp sudo[675403]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=brmrjxl user-5=lakesan1 user-6=strathar user-7=atestord user-8=sarafoundation user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=dickemery123 user-14=ptkxhsbt user-15=ulsukarm user-16=foundation user-17=booff user-18=markward user-19=vantagep user-20=athenare user-21=connect9 user-22=lbscrmod user-23=maflemin user-24=agproduc user-25=still user-26=stephani user-27=leereyn1 user-28=jarvisin user-29=spectrum user-30=theblack user-31=hodgesonweb user-32=bedfords user-33=newstoda user-34=ggaaorgu user-35=belle user-36=bemadonn user-37=nstriton user-38=brighto1 user-39=vivienn1 user-40=firstre2 user-41=oneoarco user-42=battlere user-43=innovat1 user-44=askhform user-45=stuartge user-46=nativene user-47=alexadmin user-48=skyfirec
Sep 21 21:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=clarkass user-50=firstrel user-51=costestimatorco user-52=firstred user-53=highlegh user-54=southlon user-55=ultbcrra user-56=jonhartl user-57=seftvta user-58=firstres user-59=opaiscyx user-60=coursemc user-61=accooper user-62=ianrayne user-63=connectedshoppin user-64=thqkgnbz user-65=gilpin user-66=milloyco user-67=elecleis user-68=hubmaster user-69=fetch user-70=carsinyo user-71=smrszyqg user-72=isleofwi user-73=nomistakes user-74=hidden user-75=barbersh user-76=tigerlet user-77=nscdp user-78=leftie user-79=foods user-80=health2045 user-81=fortunaz user-82=lkpier user-83=donnychicago user-84=firstre5 user-85=steakbridieme user-86=ctedorgu user-87=philmcph user-88=hirefootballgame user-89=eugincou user-90=courseme user-91=cambria1 user-92=cathski user-93=ninejimm user-94=reliable user-95=cwsocial user-96=howardon user-97=paulmca1 user-98=pugwash user-99=bwppodcast user-100=zebrapho user-101=steve
Sep 21 21:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=beauty user-105=darkstar user-106=eatspam user-107=dhyana user-108=fawcettd user-109=burydropin user-110=nsceres user-111=bakery user-112=crrtipdl user-113=sosevalu user-114=nove user-115=boldover user-116=dancinggardener user-117=stagingerris user-118=ladburyp user-119=kategilpin user-120=design user-121=tstardom user-122=oubpgvbx user-123=what user-124=havantho user-125=sketchy user-126=cath user-127=nvihkvu user-128=chrisdal user-129=mcdermos user-130=david user-131=careers user-132=nbhavers user-133=tomandle user-134=jennimil user-135=outdoorc user-136=ranxterc user-137=hodgsonmail user-138=branko user-139=romaldki user-140=lucy user-141=attlebor user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 21:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 21:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:47 nativespace-cdp sudo[675411]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 21:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:47 nativespace-cdp sudo[675420]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-B8Wsjw3ESxHuREgB.~
Sep 21 21:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:47 nativespace-cdp sudo[675425]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-B8Wsjw3ESxHuREgB.~'
Sep 21 21:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:47 nativespace-cdp sudo[675429]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-B8Wsjw3ESxHuREgB.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 21:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:47 nativespace-cdp sudo[675435]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 21:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:47 nativespace-cdp sudo[675440]: pam_unix(sudo:session): session closed for user root
Sep 21 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 21:09:48 nativespace-cdp sudo[675462]: pam_unix(sudo:session): session closed for user root
Sep 21 21:11:33 nativespace-cdp sshd[676026]: Connection closed by 159.100.136.21 port 34706 [preauth]
Sep 21 21:16:33 nativespace-cdp sshd[677182]: Connection closed by 159.100.136.21 port 44090 [preauth]
Sep 21 21:21:33 nativespace-cdp sshd[678383]: Connection closed by 159.100.136.21 port 53604 [preauth]
Sep 21 21:26:35 nativespace-cdp sshd[679725]: Connection closed by 159.100.136.21 port 34644 [preauth]
Sep 21 21:31:33 nativespace-cdp sshd[680993]: Connection closed by 159.100.136.21 port 43644 [preauth]
Sep 21 21:36:33 nativespace-cdp sshd[682489]: Connection closed by 159.100.136.21 port 53386 [preauth]
Sep 21 21:41:34 nativespace-cdp sshd[683643]: Connection closed by 159.100.136.21 port 34588 [preauth]
Sep 21 21:46:33 nativespace-cdp sshd[684753]: Connection closed by 159.100.136.21 port 43938 [preauth]
Sep 21 21:50:31 nativespace-cdp sshd[685871]: Invalid user deploy from 89.134.210.196 port 39010
Sep 21 21:50:31 nativespace-cdp sshd[685871]: input_userauth_request: invalid user deploy [preauth]
Sep 21 21:50:32 nativespace-cdp sshd[685871]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:50:32 nativespace-cdp sshd[685871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.134.210.196
Sep 21 21:50:33 nativespace-cdp sshd[685871]: Failed password for invalid user deploy from 89.134.210.196 port 39010 ssh2
Sep 21 21:50:33 nativespace-cdp sshd[685871]: Received disconnect from 89.134.210.196 port 39010:11: Bye Bye [preauth]
Sep 21 21:50:33 nativespace-cdp sshd[685871]: Disconnected from 89.134.210.196 port 39010 [preauth]
Sep 21 21:51:35 nativespace-cdp sshd[686058]: Connection closed by 159.100.136.21 port 52744 [preauth]
Sep 21 21:51:58 nativespace-cdp sshd[686271]: Invalid user ubuntu from 52.161.145.142 port 59874
Sep 21 21:51:58 nativespace-cdp sshd[686271]: input_userauth_request: invalid user ubuntu [preauth]
Sep 21 21:51:58 nativespace-cdp sshd[686271]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:51:58 nativespace-cdp sshd[686271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.145.142
Sep 21 21:52:00 nativespace-cdp sshd[686271]: Failed password for invalid user ubuntu from 52.161.145.142 port 59874 ssh2
Sep 21 21:52:00 nativespace-cdp sshd[686271]: Received disconnect from 52.161.145.142 port 59874:11: Bye Bye [preauth]
Sep 21 21:52:00 nativespace-cdp sshd[686271]: Disconnected from 52.161.145.142 port 59874 [preauth]
Sep 21 21:56:03 nativespace-cdp sshd[687370]: Invalid user tomcat from 89.134.210.196 port 59802
Sep 21 21:56:03 nativespace-cdp sshd[687370]: input_userauth_request: invalid user tomcat [preauth]
Sep 21 21:56:03 nativespace-cdp sshd[687370]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:56:03 nativespace-cdp sshd[687370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.134.210.196
Sep 21 21:56:05 nativespace-cdp sshd[687370]: Failed password for invalid user tomcat from 89.134.210.196 port 59802 ssh2
Sep 21 21:56:05 nativespace-cdp sshd[687370]: Received disconnect from 89.134.210.196 port 59802:11: Bye Bye [preauth]
Sep 21 21:56:05 nativespace-cdp sshd[687370]: Disconnected from 89.134.210.196 port 59802 [preauth]
Sep 21 21:56:26 nativespace-cdp sshd[687430]: Invalid user user from 52.161.145.142 port 48172
Sep 21 21:56:26 nativespace-cdp sshd[687430]: input_userauth_request: invalid user user [preauth]
Sep 21 21:56:26 nativespace-cdp sshd[687430]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:56:26 nativespace-cdp sshd[687430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.145.142
Sep 21 21:56:29 nativespace-cdp sshd[687430]: Failed password for invalid user user from 52.161.145.142 port 48172 ssh2
Sep 21 21:56:32 nativespace-cdp sshd[687430]: Received disconnect from 52.161.145.142 port 48172:11: Bye Bye [preauth]
Sep 21 21:56:32 nativespace-cdp sshd[687430]: Disconnected from 52.161.145.142 port 48172 [preauth]
Sep 21 21:56:35 nativespace-cdp sshd[687471]: Connection closed by 159.100.136.21 port 32992 [preauth]
Sep 21 21:56:46 nativespace-cdp sshd[687596]: Invalid user abhishek from 89.134.210.196 port 42686
Sep 21 21:56:46 nativespace-cdp sshd[687596]: input_userauth_request: invalid user abhishek [preauth]
Sep 21 21:56:46 nativespace-cdp sshd[687596]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:56:46 nativespace-cdp sshd[687596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.134.210.196
Sep 21 21:56:48 nativespace-cdp sshd[687596]: Failed password for invalid user abhishek from 89.134.210.196 port 42686 ssh2
Sep 21 21:56:48 nativespace-cdp sshd[687596]: Received disconnect from 89.134.210.196 port 42686:11: Bye Bye [preauth]
Sep 21 21:56:48 nativespace-cdp sshd[687596]: Disconnected from 89.134.210.196 port 42686 [preauth]
Sep 21 21:56:54 nativespace-cdp sshd[687637]: Invalid user ubuntu from 192.3.219.92 port 33096
Sep 21 21:56:54 nativespace-cdp sshd[687637]: input_userauth_request: invalid user ubuntu [preauth]
Sep 21 21:56:54 nativespace-cdp sshd[687637]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:56:54 nativespace-cdp sshd[687637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.219.92
Sep 21 21:56:56 nativespace-cdp sshd[687637]: Failed password for invalid user ubuntu from 192.3.219.92 port 33096 ssh2
Sep 21 21:56:56 nativespace-cdp sshd[687637]: Received disconnect from 192.3.219.92 port 33096:11: Bye Bye [preauth]
Sep 21 21:56:56 nativespace-cdp sshd[687637]: Disconnected from 192.3.219.92 port 33096 [preauth]
Sep 21 21:57:09 nativespace-cdp sshd[687709]: Invalid user support from 52.161.145.142 port 51636
Sep 21 21:57:09 nativespace-cdp sshd[687709]: input_userauth_request: invalid user support [preauth]
Sep 21 21:57:09 nativespace-cdp sshd[687709]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:57:09 nativespace-cdp sshd[687709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.145.142
Sep 21 21:57:11 nativespace-cdp sshd[687709]: Failed password for invalid user support from 52.161.145.142 port 51636 ssh2
Sep 21 21:57:51 nativespace-cdp sshd[688023]: Connection closed by 192.3.219.92 port 41690 [preauth]
Sep 21 21:58:36 nativespace-cdp sshd[688180]: Invalid user user from 192.3.219.92 port 45610
Sep 21 21:58:36 nativespace-cdp sshd[688180]: input_userauth_request: invalid user user [preauth]
Sep 21 21:58:37 nativespace-cdp sshd[688180]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 21:58:37 nativespace-cdp sshd[688180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.219.92
Sep 21 21:58:39 nativespace-cdp sshd[688180]: Failed password for invalid user user from 192.3.219.92 port 45610 ssh2
Sep 21 21:58:39 nativespace-cdp sshd[688180]: Received disconnect from 192.3.219.92 port 45610:11: Bye Bye [preauth]
Sep 21 21:58:39 nativespace-cdp sshd[688180]: Disconnected from 192.3.219.92 port 45610 [preauth]
Sep 21 21:59:17 nativespace-cdp sshd[688309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.219.92  user=root
Sep 21 21:59:17 nativespace-cdp sshd[688309]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 21 21:59:19 nativespace-cdp sshd[688309]: Failed password for root from 192.3.219.92 port 32934 ssh2
Sep 21 21:59:19 nativespace-cdp sshd[688309]: Received disconnect from 192.3.219.92 port 32934:11: Bye Bye [preauth]
Sep 21 21:59:19 nativespace-cdp sshd[688309]: Disconnected from 192.3.219.92 port 32934 [preauth]
Sep 21 22:01:35 nativespace-cdp sshd[688997]: Connection closed by 159.100.136.21 port 42164 [preauth]
Sep 21 22:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 22:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:14 nativespace-cdp sudo[689763]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status attlebor
Sep 21 22:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:16 nativespace-cdp sudo[689774]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 22:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:19 nativespace-cdp sudo[689849]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status ptkxhsbt
Sep 21 22:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:19 nativespace-cdp sudo[689853]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 22:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:21 nativespace-cdp sudo[689886]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status stuartge
Sep 21 22:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:22 nativespace-cdp sudo[689890]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 22:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:27 nativespace-cdp sudo[689991]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status tigerlet
Sep 21 22:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:03:27 nativespace-cdp sudo[689996]: pam_unix(sudo:session): session closed for user root
Sep 21 22:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 22:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:05:37 nativespace-cdp sudo[690098]: pam_unix(sudo:session): session closed for user root
Sep 21 22:05:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status zebrapho
Sep 21 22:05:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:06:02 nativespace-cdp sudo[690523]: pam_unix(sudo:session): session closed for user root
Sep 21 22:06:35 nativespace-cdp sshd[690840]: Connection closed by 159.100.136.21 port 51714 [preauth]
Sep 21 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:30 nativespace-cdp sudo[691907]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:30 nativespace-cdp sudo[691911]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 22:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:31 nativespace-cdp sudo[691917]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 22:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:31 nativespace-cdp sudo[691927]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 22:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691933]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691944]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691949]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691953]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691958]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691964]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 22:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:33 nativespace-cdp sudo[691969]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:35 nativespace-cdp sudo[691982]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 22:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:36 nativespace-cdp sudo[691989]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=spectrum user-3=theblack user-4=hodgesonweb user-5=still user-6=agproduc user-7=stephani user-8=leereyn1 user-9=booff user-10=foundation user-11=markward user-12=athenare user-13=connect9 user-14=vantagep user-15=maflemin user-16=lbscrmod user-17=ulsukarm user-18=martsblo user-19=dickemery123 user-20=ptkxhsbt user-21=lbhyisi user-22=hhdugcor user-23=magichat user-24=lakesan1 user-25=brmrjxl user-26=strathar user-27=sarafoundation user-28=atestord user-29=wilsonsw user-30=musorguk user-31=megacards user-32=gilpin user-33=milloyco user-34=elecleis user-35=hubmaster user-36=carsinyo user-37=fetch user-38=accooper user-39=ianrayne user-40=connectedshoppin user-41=thqkgnbz user-42=seftvta user-43=jonhartl user-44=ultbcrra user-45=firstres user-46=opaiscyx user-47=coursemc
Sep 21 22:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstrel user-49=clarkass user-50=costestimatorco user-51=firstred user-52=southlon user-53=highlegh user-54=skyfirec user-55=alexadmin user-56=innovat1 user-57=askhform user-58=stuartge user-59=nativene user-60=brighto1 user-61=nstriton user-62=firstre2 user-63=vivienn1 user-64=battlere user-65=oneoarco user-66=bedfords user-67=ggaaorgu user-68=belle user-69=newstoda user-70=bemadonn user-71=burydropin user-72=fawcettd user-73=nsceres user-74=beauty user-75=eatspam user-76=darkstar user-77=dhyana user-78=sibtoncc user-79=asandcoc user-80=bwppodcast user-81=zebrapho user-82=steve user-83=cathski user-84=cambria1 user-85=ninejimm user-86=reliable user-87=paulmca1 user-88=howardon user-89=pugwash user-90=cwsocial user-91=hirefootballgame user-92=eugincou user-93=courseme user-94=nscdp user-95=health2045 user-96=fortunaz user-97=leftie user-98=foods user-99=lkpier user-100=philmcph user-101=ctedorgu
Sep 21 22:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=firstre5 user-103=donnychicago user-104=steakbridieme user-105=smrszyqg user-106=isleofwi user-107=hidden user-108=nomistakes user-109=barbersh user-110=tigerlet user-111=attlebor user-112=lucy user-113=onlycont user-114=ranxterc user-115=outdoorc user-116=hodgsonmail user-117=branko user-118=romaldki user-119=tomandle user-120=jennimil user-121=chrisdal user-122=mcdermos user-123=nbhavers user-124=careers user-125=david user-126=oubpgvbx user-127=tstardom user-128=what user-129=cath user-130=sketchy user-131=havantho user-132=nvihkvu user-133=ladburyp user-134=dancinggardener user-135=stagingerris user-136=kategilpin user-137=design user-138=nove user-139=boldover user-140=bakery user-141=sosevalu user-142=crrtipdl feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 21 22:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 22:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:37 nativespace-cdp sudo[691997]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 22:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:38 nativespace-cdp sudo[692011]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zMXeBnaMags5t9ur.~
Sep 21 22:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:38 nativespace-cdp sudo[692018]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zMXeBnaMags5t9ur.~'
Sep 21 22:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:38 nativespace-cdp sudo[692022]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zMXeBnaMags5t9ur.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 22:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:38 nativespace-cdp sudo[692029]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 22:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:38 nativespace-cdp sudo[692036]: pam_unix(sudo:session): session closed for user root
Sep 21 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 22:09:39 nativespace-cdp sudo[692068]: pam_unix(sudo:session): session closed for user root
Sep 21 22:11:33 nativespace-cdp sshd[692839]: Connection closed by 159.100.136.21 port 60612 [preauth]
Sep 21 22:16:33 nativespace-cdp sshd[694046]: Connection closed by 159.100.136.21 port 41658 [preauth]
Sep 21 22:26:33 nativespace-cdp sshd[696695]: Connection closed by 159.100.136.21 port 60060 [preauth]
Sep 21 22:31:33 nativespace-cdp sshd[698113]: Connection closed by 159.100.136.21 port 40570 [preauth]
Sep 21 22:36:33 nativespace-cdp sshd[699990]: Connection closed by 159.100.136.21 port 50300 [preauth]
Sep 21 22:41:33 nativespace-cdp sshd[701062]: Connection closed by 159.100.136.21 port 59222 [preauth]
Sep 21 22:46:33 nativespace-cdp sshd[702130]: Connection closed by 159.100.136.21 port 40290 [preauth]
Sep 21 22:51:33 nativespace-cdp sshd[703497]: Connection closed by 159.100.136.21 port 49192 [preauth]
Sep 21 22:51:41 nativespace-cdp sshd[703521]: Invalid user test from 45.175.75.254 port 56938
Sep 21 22:51:41 nativespace-cdp sshd[703521]: input_userauth_request: invalid user test [preauth]
Sep 21 22:51:41 nativespace-cdp sshd[703521]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 22:51:41 nativespace-cdp sshd[703521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.175.75.254
Sep 21 22:51:43 nativespace-cdp sshd[703521]: Failed password for invalid user test from 45.175.75.254 port 56938 ssh2
Sep 21 22:51:44 nativespace-cdp sshd[703521]: Received disconnect from 45.175.75.254 port 56938:11: Bye Bye [preauth]
Sep 21 22:51:44 nativespace-cdp sshd[703521]: Disconnected from 45.175.75.254 port 56938 [preauth]
Sep 21 22:54:38 nativespace-cdp sshd[704187]: Invalid user sysadmin from 186.87.166.141 port 54076
Sep 21 22:54:38 nativespace-cdp sshd[704187]: input_userauth_request: invalid user sysadmin [preauth]
Sep 21 22:54:38 nativespace-cdp sshd[704187]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 22:54:38 nativespace-cdp sshd[704187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.87.166.141
Sep 21 22:54:40 nativespace-cdp sshd[704187]: Failed password for invalid user sysadmin from 186.87.166.141 port 54076 ssh2
Sep 21 22:54:46 nativespace-cdp sshd[704187]: Received disconnect from 186.87.166.141 port 54076:11: Bye Bye [preauth]
Sep 21 22:54:46 nativespace-cdp sshd[704187]: Disconnected from 186.87.166.141 port 54076 [preauth]
Sep 21 22:56:34 nativespace-cdp sshd[704613]: Connection closed by 159.100.136.21 port 58136 [preauth]
Sep 21 22:58:29 nativespace-cdp sshd[705000]: Invalid user git from 186.87.166.141 port 35072
Sep 21 22:58:29 nativespace-cdp sshd[705000]: input_userauth_request: invalid user git [preauth]
Sep 21 22:58:29 nativespace-cdp sshd[705000]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 22:58:29 nativespace-cdp sshd[705000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.87.166.141
Sep 21 22:58:31 nativespace-cdp sshd[705000]: Failed password for invalid user git from 186.87.166.141 port 35072 ssh2
Sep 21 22:58:32 nativespace-cdp sshd[705000]: Received disconnect from 186.87.166.141 port 35072:11: Bye Bye [preauth]
Sep 21 22:58:32 nativespace-cdp sshd[705000]: Disconnected from 186.87.166.141 port 35072 [preauth]
Sep 21 22:59:27 nativespace-cdp sshd[705129]: Invalid user odoo from 186.87.166.141 port 47370
Sep 21 22:59:27 nativespace-cdp sshd[705129]: input_userauth_request: invalid user odoo [preauth]
Sep 21 22:59:27 nativespace-cdp sshd[705129]: pam_unix(sshd:auth): check pass; user unknown
Sep 21 22:59:27 nativespace-cdp sshd[705129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.87.166.141
Sep 21 22:59:30 nativespace-cdp sshd[705129]: Failed password for invalid user odoo from 186.87.166.141 port 47370 ssh2
Sep 21 22:59:30 nativespace-cdp sshd[705129]: Received disconnect from 186.87.166.141 port 47370:11: Bye Bye [preauth]
Sep 21 22:59:30 nativespace-cdp sshd[705129]: Disconnected from 186.87.166.141 port 47370 [preauth]
Sep 21 23:01:33 nativespace-cdp sshd[705748]: Connection closed by 159.100.136.21 port 38212 [preauth]
Sep 21 23:06:33 nativespace-cdp sshd[707051]: Connection closed by 159.100.136.21 port 47428 [preauth]
Sep 21 23:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 21 23:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:24 nativespace-cdp sudo[707572]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 21 23:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:24 nativespace-cdp sudo[707576]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 21 23:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:25 nativespace-cdp sudo[707581]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 21 23:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:25 nativespace-cdp sudo[707589]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 21 23:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:26 nativespace-cdp sudo[707595]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 21 23:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:26 nativespace-cdp sudo[707606]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 21 23:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:26 nativespace-cdp sudo[707610]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 21 23:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:26 nativespace-cdp sudo[707615]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 21 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:27 nativespace-cdp sudo[707620]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 21 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:27 nativespace-cdp sudo[707625]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 21 23:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:27 nativespace-cdp sudo[707632]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 21 23:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:28 nativespace-cdp sudo[707643]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 21 23:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:28 nativespace-cdp sudo[707649]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstred user-2=southlon user-3=highlegh user-4=firstrel user-5=clarkass user-6=costestimatorco user-7=coursemc user-8=opaiscyx user-9=jonhartl user-10=seftvta user-11=ultbcrra user-12=firstres user-13=connectedshoppin user-14=thqkgnbz user-15=accooper user-16=ianrayne user-17=hubmaster user-18=carsinyo user-19=fetch user-20=gilpin user-21=milloyco user-22=elecleis user-23=ggaaorgu user-24=belle user-25=newstoda user-26=bemadonn user-27=bedfords user-28=firstre2 user-29=vivienn1 user-30=battlere user-31=oneoarco user-32=brighto1 user-33=nstriton user-34=nativene user-35=innovat1 user-36=askhform user-37=stuartge user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=athenare user-42=connect9 user-43=vantagep user-44=maflemin user-45=lbscrmod user-46=booff user-47=foundation user-48=markward
Sep 21 23:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=stephani user-50=leereyn1 user-51=still user-52=agproduc user-53=spectrum user-54=theblack user-55=hodgesonweb user-56=jarvisin user-57=musorguk user-58=megacards user-59=wilsonsw user-60=strathar user-61=sarafoundation user-62=atestord user-63=brmrjxl user-64=lakesan1 user-65=magichat user-66=lbhyisi user-67=hhdugcor user-68=dickemery123 user-69=ptkxhsbt user-70=martsblo user-71=careers user-72=nbhavers user-73=david user-74=chrisdal user-75=mcdermos user-76=jennimil user-77=tomandle user-78=romaldki user-79=ranxterc user-80=outdoorc user-81=hodgsonmail user-82=branko user-83=onlycont user-84=attlebor user-85=lucy user-86=bakery user-87=sosevalu user-88=crrtipdl user-89=boldover user-90=nove user-91=design user-92=ladburyp user-93=stagingerris user-94=dancinggardener user-95=kategilpin user-96=sketchy user-97=cath user-98=havantho user-99=nvihkvu user-100=oubpgvbx user-101=tstardom user-102=what
Sep 21 23:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=steve user-104=bwppodcast user-105=zebrapho user-106=asandcoc user-107=sibtoncc user-108=dhyana user-109=beauty user-110=eatspam user-111=darkstar user-112=nsceres user-113=burydropin user-114=fawcettd user-115=hidden user-116=nomistakes user-117=barbersh user-118=tigerlet user-119=smrszyqg user-120=isleofwi user-121=lkpier user-122=ctedorgu user-123=philmcph user-124=donnychicago user-125=firstre5 user-126=steakbridieme user-127=nscdp user-128=fortunaz user-129=health2045 user-130=foods user-131=leftie user-132=eugincou user-133=courseme user-134=hirefootballgame user-135=paulmca1 user-136=howardon user-137=pugwash user-138=cwsocial user-139=cathski user-140=cambria1 user-141=ninejimm user-142=reliable feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 21 23:09:28 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 21 23:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:29 nativespace-cdp sudo[707656]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:29 nativespace-cdp sudo[707664]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A5iOm9f1vAHNEdj8.~
Sep 21 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:29 nativespace-cdp sudo[707669]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A5iOm9f1vAHNEdj8.~'
Sep 21 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:29 nativespace-cdp sudo[707673]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-A5iOm9f1vAHNEdj8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 21 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:29 nativespace-cdp sudo[707679]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 21 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:29 nativespace-cdp sudo[707685]: pam_unix(sudo:session): session closed for user root
Sep 21 23:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 21 23:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 21 23:09:36 nativespace-cdp sudo[707724]: pam_unix(sudo:session): session closed for user root
Sep 21 23:11:33 nativespace-cdp sshd[708179]: Connection closed by 159.100.136.21 port 56758 [preauth]
Sep 21 23:16:34 nativespace-cdp sshd[709238]: Connection closed by 159.100.136.21 port 37934 [preauth]
Sep 21 23:21:33 nativespace-cdp sshd[710646]: Connection closed by 159.100.136.21 port 46814 [preauth]
Sep 21 23:26:37 nativespace-cdp sshd[711690]: Connection closed by 159.100.136.21 port 56232 [preauth]
Sep 21 23:31:34 nativespace-cdp sshd[712768]: Connection closed by 159.100.136.21 port 35978 [preauth]
Sep 21 23:36:33 nativespace-cdp sshd[714055]: Connection closed by 159.100.136.21 port 45154 [preauth]
Sep 21 23:41:33 nativespace-cdp sshd[715147]: Connection closed by 159.100.136.21 port 54668 [preauth]
Sep 21 23:46:35 nativespace-cdp sshd[716373]: Connection closed by 159.100.136.21 port 36064 [preauth]
Sep 21 23:51:33 nativespace-cdp sshd[718104]: Connection closed by 159.100.136.21 port 45072 [preauth]
Sep 21 23:56:36 nativespace-cdp sshd[719586]: Connection closed by 159.100.136.21 port 54442 [preauth]
Sep 22 00:01:33 nativespace-cdp sshd[721274]: Connection closed by 159.100.136.21 port 34690 [preauth]
Sep 22 00:02:43 nativespace-cdp sshd[721907]: Invalid user tuan from 103.217.145.152 port 41602
Sep 22 00:02:43 nativespace-cdp sshd[721907]: input_userauth_request: invalid user tuan [preauth]
Sep 22 00:02:43 nativespace-cdp sshd[721907]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:02:43 nativespace-cdp sshd[721907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.145.152
Sep 22 00:02:44 nativespace-cdp sshd[721907]: Failed password for invalid user tuan from 103.217.145.152 port 41602 ssh2
Sep 22 00:02:45 nativespace-cdp sshd[721907]: Received disconnect from 103.217.145.152 port 41602:11: Bye Bye [preauth]
Sep 22 00:02:45 nativespace-cdp sshd[721907]: Disconnected from 103.217.145.152 port 41602 [preauth]
Sep 22 00:03:08 nativespace-cdp sshd[722099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.184.153  user=root
Sep 22 00:03:08 nativespace-cdp sshd[722099]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 00:03:10 nativespace-cdp sshd[722099]: Failed password for root from 161.35.184.153 port 50480 ssh2
Sep 22 00:03:10 nativespace-cdp sshd[722099]: Received disconnect from 161.35.184.153 port 50480:11: Bye Bye [preauth]
Sep 22 00:03:10 nativespace-cdp sshd[722099]: Disconnected from 161.35.184.153 port 50480 [preauth]
Sep 22 00:03:33 nativespace-cdp sshd[722226]: Invalid user steam from 103.193.177.194 port 41438
Sep 22 00:03:33 nativespace-cdp sshd[722226]: input_userauth_request: invalid user steam [preauth]
Sep 22 00:03:33 nativespace-cdp sshd[722226]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:03:33 nativespace-cdp sshd[722226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.177.194
Sep 22 00:03:34 nativespace-cdp sshd[722226]: Failed password for invalid user steam from 103.193.177.194 port 41438 ssh2
Sep 22 00:03:37 nativespace-cdp sshd[722226]: Received disconnect from 103.193.177.194 port 41438:11: Bye Bye [preauth]
Sep 22 00:03:37 nativespace-cdp sshd[722226]: Disconnected from 103.193.177.194 port 41438 [preauth]
Sep 22 00:04:58 nativespace-cdp sshd[722618]: Invalid user sysadmin from 36.64.68.99 port 48978
Sep 22 00:04:58 nativespace-cdp sshd[722618]: input_userauth_request: invalid user sysadmin [preauth]
Sep 22 00:04:58 nativespace-cdp sshd[722618]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:04:58 nativespace-cdp sshd[722618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.64.68.99
Sep 22 00:05:00 nativespace-cdp sshd[722618]: Failed password for invalid user sysadmin from 36.64.68.99 port 48978 ssh2
Sep 22 00:05:05 nativespace-cdp sshd[722618]: Received disconnect from 36.64.68.99 port 48978:11: Bye Bye [preauth]
Sep 22 00:05:05 nativespace-cdp sshd[722618]: Disconnected from 36.64.68.99 port 48978 [preauth]
Sep 22 00:05:56 nativespace-cdp sshd[723018]: Invalid user panda from 146.190.60.168 port 57376
Sep 22 00:05:56 nativespace-cdp sshd[723018]: input_userauth_request: invalid user panda [preauth]
Sep 22 00:05:56 nativespace-cdp sshd[723018]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:05:56 nativespace-cdp sshd[723018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.60.168
Sep 22 00:05:58 nativespace-cdp sshd[723018]: Failed password for invalid user panda from 146.190.60.168 port 57376 ssh2
Sep 22 00:05:58 nativespace-cdp sshd[723018]: Received disconnect from 146.190.60.168 port 57376:11: Bye Bye [preauth]
Sep 22 00:05:58 nativespace-cdp sshd[723018]: Disconnected from 146.190.60.168 port 57376 [preauth]
Sep 22 00:06:33 nativespace-cdp sshd[723206]: Connection closed by 159.100.136.21 port 44168 [preauth]
Sep 22 00:07:04 nativespace-cdp sshd[723345]: Invalid user nexus from 161.35.184.153 port 49272
Sep 22 00:07:04 nativespace-cdp sshd[723345]: input_userauth_request: invalid user nexus [preauth]
Sep 22 00:07:04 nativespace-cdp sshd[723345]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:07:04 nativespace-cdp sshd[723345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.184.153
Sep 22 00:07:06 nativespace-cdp sshd[723345]: Failed password for invalid user nexus from 161.35.184.153 port 49272 ssh2
Sep 22 00:07:07 nativespace-cdp sshd[723345]: Received disconnect from 161.35.184.153 port 49272:11: Bye Bye [preauth]
Sep 22 00:07:07 nativespace-cdp sshd[723345]: Disconnected from 161.35.184.153 port 49272 [preauth]
Sep 22 00:07:17 nativespace-cdp sshd[723387]: Invalid user ubuntu from 146.190.60.168 port 58054
Sep 22 00:07:17 nativespace-cdp sshd[723387]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 00:07:17 nativespace-cdp sshd[723387]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:07:17 nativespace-cdp sshd[723387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.60.168
Sep 22 00:07:20 nativespace-cdp sshd[723387]: Failed password for invalid user ubuntu from 146.190.60.168 port 58054 ssh2
Sep 22 00:07:20 nativespace-cdp sshd[723387]: Received disconnect from 146.190.60.168 port 58054:11: Bye Bye [preauth]
Sep 22 00:07:20 nativespace-cdp sshd[723387]: Disconnected from 146.190.60.168 port 58054 [preauth]
Sep 22 00:07:39 nativespace-cdp sshd[723455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.177.194  user=root
Sep 22 00:07:39 nativespace-cdp sshd[723455]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 00:07:40 nativespace-cdp sshd[723537]: Invalid user username from 161.35.184.153 port 40230
Sep 22 00:07:40 nativespace-cdp sshd[723537]: input_userauth_request: invalid user username [preauth]
Sep 22 00:07:40 nativespace-cdp sshd[723537]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:07:40 nativespace-cdp sshd[723537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.184.153
Sep 22 00:07:41 nativespace-cdp sshd[723537]: Failed password for invalid user username from 161.35.184.153 port 40230 ssh2
Sep 22 00:07:41 nativespace-cdp sshd[723455]: Failed password for root from 103.193.177.194 port 33096 ssh2
Sep 22 00:07:44 nativespace-cdp sshd[723455]: Received disconnect from 103.193.177.194 port 33096:11: Bye Bye [preauth]
Sep 22 00:07:44 nativespace-cdp sshd[723455]: Disconnected from 103.193.177.194 port 33096 [preauth]
Sep 22 00:07:59 nativespace-cdp sshd[723689]: Invalid user nexus from 146.190.60.168 port 33712
Sep 22 00:07:59 nativespace-cdp sshd[723689]: input_userauth_request: invalid user nexus [preauth]
Sep 22 00:07:59 nativespace-cdp sshd[723689]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:07:59 nativespace-cdp sshd[723689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.60.168
Sep 22 00:08:01 nativespace-cdp sshd[723689]: Failed password for invalid user nexus from 146.190.60.168 port 33712 ssh2
Sep 22 00:08:10 nativespace-cdp sshd[723772]: Invalid user sysadmin from 103.217.145.152 port 57168
Sep 22 00:08:10 nativespace-cdp sshd[723772]: input_userauth_request: invalid user sysadmin [preauth]
Sep 22 00:08:10 nativespace-cdp sshd[723772]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:08:10 nativespace-cdp sshd[723772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.145.152
Sep 22 00:08:11 nativespace-cdp sshd[723772]: Failed password for invalid user sysadmin from 103.217.145.152 port 57168 ssh2
Sep 22 00:08:12 nativespace-cdp sshd[723772]: Received disconnect from 103.217.145.152 port 57168:11: Bye Bye [preauth]
Sep 22 00:08:12 nativespace-cdp sshd[723772]: Disconnected from 103.217.145.152 port 57168 [preauth]
Sep 22 00:08:56 nativespace-cdp sshd[723900]: Invalid user sopuser from 103.193.177.194 port 56226
Sep 22 00:08:56 nativespace-cdp sshd[723900]: input_userauth_request: invalid user sopuser [preauth]
Sep 22 00:08:56 nativespace-cdp sshd[723900]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:08:56 nativespace-cdp sshd[723900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.177.194
Sep 22 00:08:59 nativespace-cdp sshd[723900]: Failed password for invalid user sopuser from 103.193.177.194 port 56226 ssh2
Sep 22 00:08:59 nativespace-cdp sshd[723900]: Received disconnect from 103.193.177.194 port 56226:11: Bye Bye [preauth]
Sep 22 00:08:59 nativespace-cdp sshd[723900]: Disconnected from 103.193.177.194 port 56226 [preauth]
Sep 22 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:25 nativespace-cdp sudo[724079]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:25 nativespace-cdp sudo[724084]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 00:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:26 nativespace-cdp sudo[724089]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:26 nativespace-cdp sudo[724099]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 00:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724106]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724120]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724124]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724129]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724134]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724139]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 00:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:27 nativespace-cdp sudo[724145]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:32 nativespace-cdp sudo[724165]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:32 nativespace-cdp sudo[724171]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=mcdermos user-2=chrisdal user-3=david user-4=nbhavers user-5=careers user-6=tomandle user-7=jennimil user-8=branko user-9=hodgsonmail user-10=outdoorc user-11=ranxterc user-12=romaldki user-13=lucy user-14=attlebor user-15=onlycont user-16=crrtipdl user-17=sosevalu user-18=bakery user-19=nove user-20=boldover user-21=kategilpin user-22=dancinggardener user-23=stagingerris user-24=ladburyp user-25=design user-26=what user-27=oubpgvbx user-28=tstardom user-29=nvihkvu user-30=havantho user-31=cath user-32=sketchy user-33=zebrapho user-34=bwppodcast user-35=steve user-36=sibtoncc user-37=asandcoc user-38=darkstar user-39=eatspam user-40=beauty user-41=dhyana user-42=fawcettd user-43=burydropin user-44=nsceres user-45=isleofwi user-46=smrszyqg user-47=tigerlet user-48=barbersh user-49=nomistakes
Sep 22 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=hidden user-51=leftie user-52=foods user-53=fortunaz user-54=health2045 user-55=nscdp user-56=donnychicago user-57=firstre5 user-58=steakbridieme user-59=philmcph user-60=ctedorgu user-61=lkpier user-62=hirefootballgame user-63=courseme user-64=eugincou user-65=ninejimm user-66=reliable user-67=cambria1 user-68=cathski user-69=cwsocial user-70=paulmca1 user-71=pugwash user-72=howardon user-73=costestimatorco user-74=clarkass user-75=firstrel user-76=highlegh user-77=southlon user-78=firstred user-79=firstres user-80=ultbcrra user-81=seftvta user-82=jonhartl user-83=coursemc user-84=opaiscyx user-85=ianrayne user-86=accooper user-87=thqkgnbz user-88=connectedshoppin user-89=elecleis user-90=gilpin user-91=milloyco user-92=fetch user-93=carsinyo user-94=hubmaster user-95=bedfords user-96=bemadonn user-97=newstoda user-98=belle user-99=ggaaorgu user-100=nstriton user-101=brighto1 user-102=oneoarco
Sep 22 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=vivienn1 user-105=firstre2 user-106=askhform user-107=stuartge user-108=innovat1 user-109=nativene user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=booff user-114=foundation user-115=markward user-116=lbscrmod user-117=maflemin user-118=vantagep user-119=athenare user-120=connect9 user-121=agproduc user-122=still user-123=leereyn1 user-124=stephani user-125=jarvisin user-126=hodgesonweb user-127=theblack user-128=spectrum user-129=wilsonsw user-130=megacards user-131=musorguk user-132=brmrjxl user-133=lakesan1 user-134=atestord user-135=sarafoundation user-136=strathar user-137=hhdugcor user-138=lbhyisi user-139=magichat user-140=martsblo user-141=ptkxhsbt user-142=dickemery123 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 00:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:32 nativespace-cdp sudo[724182]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:33 nativespace-cdp sudo[724193]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JVKTkfGgFwHc3IaT.~
Sep 22 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:33 nativespace-cdp sudo[724198]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JVKTkfGgFwHc3IaT.~'
Sep 22 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:33 nativespace-cdp sudo[724204]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JVKTkfGgFwHc3IaT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:33 nativespace-cdp sudo[724210]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:33 nativespace-cdp sudo[724215]: pam_unix(sudo:session): session closed for user root
Sep 22 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 00:09:34 nativespace-cdp sudo[724241]: pam_unix(sudo:session): session closed for user root
Sep 22 00:10:10 nativespace-cdp sshd[724493]: Invalid user support from 103.217.145.152 port 33532
Sep 22 00:10:10 nativespace-cdp sshd[724493]: input_userauth_request: invalid user support [preauth]
Sep 22 00:10:10 nativespace-cdp sshd[724493]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 00:10:10 nativespace-cdp sshd[724493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.217.145.152
Sep 22 00:10:11 nativespace-cdp sshd[724493]: Failed password for invalid user support from 103.217.145.152 port 33532 ssh2
Sep 22 00:11:35 nativespace-cdp sshd[724999]: Connection closed by 159.100.136.21 port 52922 [preauth]
Sep 22 00:16:33 nativespace-cdp sshd[726617]: Connection closed by 159.100.136.21 port 33702 [preauth]
Sep 22 00:21:36 nativespace-cdp sshd[728340]: Connection closed by 159.100.136.21 port 42670 [preauth]
Sep 22 00:26:33 nativespace-cdp sshd[729779]: Connection closed by 159.100.136.21 port 51756 [preauth]
Sep 22 00:31:34 nativespace-cdp sshd[731150]: Connection closed by 159.100.136.21 port 60694 [preauth]
Sep 22 00:36:33 nativespace-cdp sshd[732883]: Connection closed by 159.100.136.21 port 41938 [preauth]
Sep 22 00:41:33 nativespace-cdp sshd[734416]: Connection closed by 159.100.136.21 port 51110 [preauth]
Sep 22 00:46:33 nativespace-cdp sshd[735931]: Connection closed by 159.100.136.21 port 60962 [preauth]
Sep 22 00:51:33 nativespace-cdp sshd[737569]: Connection closed by 159.100.136.21 port 42106 [preauth]
Sep 22 00:56:35 nativespace-cdp sshd[738934]: Connection closed by 159.100.136.21 port 51594 [preauth]
Sep 22 01:01:33 nativespace-cdp sshd[740487]: Connection closed by 159.100.136.21 port 60508 [preauth]
Sep 22 01:06:33 nativespace-cdp sshd[742242]: Connection closed by 159.100.136.21 port 41214 [preauth]
Sep 22 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:25 nativespace-cdp sudo[743074]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:25 nativespace-cdp sudo[743077]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 01:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:26 nativespace-cdp sudo[743080]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:26 nativespace-cdp sudo[743086]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 01:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743089]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 01:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743098]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 01:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743101]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 01:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743104]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 01:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743107]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 01:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743111]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 01:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:28 nativespace-cdp sudo[743114]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 01:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:32 nativespace-cdp sudo[743132]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 01:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:32 nativespace-cdp sudo[743136]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=theblack user-3=hodgesonweb user-4=spectrum user-5=agproduc user-6=still user-7=leereyn1 user-8=stephani user-9=booff user-10=markward user-11=foundation user-12=lbscrmod user-13=maflemin user-14=vantagep user-15=athenare user-16=connect9 user-17=ulsukarm user-18=martsblo user-19=ptkxhsbt user-20=dickemery123 user-21=hhdugcor user-22=lbhyisi user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=atestord user-27=sarafoundation user-28=strathar user-29=wilsonsw user-30=megacards user-31=musorguk user-32=elecleis user-33=milloyco user-34=gilpin user-35=fetch user-36=carsinyo user-37=hubmaster user-38=ianrayne user-39=accooper user-40=thqkgnbz user-41=connectedshoppin user-42=firstres user-43=ultbcrra user-44=seftvta user-45=jonhartl user-46=coursemc user-47=opaiscyx
Sep 22 01:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=costestimatorco user-49=clarkass user-50=firstrel user-51=highlegh user-52=southlon user-53=firstred user-54=skyfirec user-55=alexadmin user-56=askhform user-57=stuartge user-58=innovat1 user-59=nativene user-60=nstriton user-61=brighto1 user-62=oneoarco user-63=battlere user-64=vivienn1 user-65=firstre2 user-66=bedfords user-67=bemadonn user-68=newstoda user-69=ggaaorgu user-70=belle user-71=fawcettd user-72=burydropin user-73=nsceres user-74=darkstar user-75=eatspam user-76=beauty user-77=dhyana user-78=sibtoncc user-79=asandcoc user-80=zebrapho user-81=bwppodcast user-82=steve user-83=ninejimm user-84=reliable user-85=cathski user-86=cambria1 user-87=cwsocial user-88=paulmca1 user-89=pugwash user-90=howardon user-91=hirefootballgame user-92=courseme user-93=eugincou user-94=foods user-95=leftie user-96=health2045 user-97=fortunaz user-98=nscdp user-99=donnychicago user-100=firstre5
Sep 22 01:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) user-101=steakbridieme user-102=ctedorgu user-103=philmcph user-104=lkpier user-105=smrszyqg user-106=isleofwi user-107=barbersh user-108=tigerlet user-109=nomistakes user-110=hidden user-111=lucy user-112=attlebor user-113=onlycont user-114=branko user-115=hodgsonmail user-116=outdoorc user-117=ranxterc user-118=romaldki user-119=tomandle user-120=jennimil user-121=mcdermos user-122=chrisdal user-123=david user-124=nbhavers user-125=careers user-126=what user-127=oubpgvbx user-128=tstardom user-129=nvihkvu user-130=havantho user-131=cath user-132=sketchy user-133=kategilpin user-134=stagingerris user-135=dancinggardener user-136=ladburyp user-137=design user-138=nove user-139=boldover user-140=crrtipdl user-141=sosevalu user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 22 01:09:32 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 01:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:33 nativespace-cdp sudo[743142]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:33 nativespace-cdp sudo[743153]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zCsoJIRNvQephL5n.~
Sep 22 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:33 nativespace-cdp sudo[743157]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zCsoJIRNvQephL5n.~'
Sep 22 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:33 nativespace-cdp sudo[743160]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-zCsoJIRNvQephL5n.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:33 nativespace-cdp sudo[743164]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:33 nativespace-cdp sudo[743167]: pam_unix(sudo:session): session closed for user root
Sep 22 01:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 01:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 01:09:35 nativespace-cdp sudo[743192]: pam_unix(sudo:session): session closed for user root
Sep 22 01:11:34 nativespace-cdp sshd[743740]: Connection closed by 159.100.136.21 port 50390 [preauth]
Sep 22 01:16:36 nativespace-cdp sshd[744873]: Connection closed by 159.100.136.21 port 59590 [preauth]
Sep 22 01:21:36 nativespace-cdp sshd[746284]: Connection closed by 159.100.136.21 port 40168 [preauth]
Sep 22 01:26:33 nativespace-cdp sshd[747716]: Connection closed by 159.100.136.21 port 49744 [preauth]
Sep 22 01:31:34 nativespace-cdp sshd[749241]: Connection closed by 159.100.136.21 port 59302 [preauth]
Sep 22 01:36:33 nativespace-cdp sshd[750991]: Connection closed by 159.100.136.21 port 40824 [preauth]
Sep 22 01:41:33 nativespace-cdp sshd[752411]: Connection closed by 159.100.136.21 port 49748 [preauth]
Sep 22 01:46:33 nativespace-cdp sshd[754027]: Connection closed by 159.100.136.21 port 59384 [preauth]
Sep 22 01:51:33 nativespace-cdp sshd[756052]: Connection closed by 159.100.136.21 port 40564 [preauth]
Sep 22 01:56:33 nativespace-cdp sshd[757445]: Connection closed by 159.100.136.21 port 49962 [preauth]
Sep 22 02:01:34 nativespace-cdp sshd[758802]: Connection closed by 159.100.136.21 port 59354 [preauth]
Sep 22 02:06:33 nativespace-cdp sshd[760303]: Connection closed by 159.100.136.21 port 40268 [preauth]
Sep 22 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:29 nativespace-cdp sudo[760966]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:30 nativespace-cdp sudo[760970]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:30 nativespace-cdp sudo[760973]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:30 nativespace-cdp sudo[760980]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 02:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[760983]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[760993]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[760996]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[760999]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[761002]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[761005]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:33 nativespace-cdp sudo[761008]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:40 nativespace-cdp sudo[761061]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:40 nativespace-cdp sudo[761067]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hirefootballgame user-2=eugincou user-3=courseme user-4=cathski user-5=cambria1 user-6=reliable user-7=ninejimm user-8=pugwash user-9=paulmca1 user-10=howardon user-11=cwsocial user-12=isleofwi user-13=smrszyqg user-14=hidden user-15=nomistakes user-16=tigerlet user-17=barbersh user-18=nscdp user-19=health2045 user-20=fortunaz user-21=foods user-22=leftie user-23=lkpier user-24=ctedorgu user-25=philmcph user-26=firstre5 user-27=donnychicago user-28=steakbridieme user-29=beauty user-30=eatspam user-31=darkstar user-32=dhyana user-33=burydropin user-34=fawcettd user-35=nsceres user-36=bwppodcast user-37=zebrapho user-38=steve user-39=asandcoc user-40=sibtoncc user-41=ladburyp user-42=dancinggardener user-43=stagingerris user-44=kategilpin user-45=design user-46=oubpgvbx user-47=tstardom
Sep 22 02:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=what user-49=sketchy user-50=cath user-51=havantho user-52=nvihkvu user-53=bakery user-54=sosevalu user-55=crrtipdl user-56=nove user-57=boldover user-58=outdoorc user-59=hodgsonmail user-60=ranxterc user-61=branko user-62=romaldki user-63=attlebor user-64=lucy user-65=onlycont user-66=chrisdal user-67=mcdermos user-68=careers user-69=nbhavers user-70=david user-71=tomandle user-72=jennimil user-73=lbhyisi user-74=hhdugcor user-75=magichat user-76=martsblo user-77=dickemery123 user-78=ptkxhsbt user-79=wilsonsw user-80=musorguk user-81=megacards user-82=brmrjxl user-83=lakesan1 user-84=strathar user-85=sarafoundation user-86=atestord user-87=still user-88=agproduc user-89=stephani user-90=leereyn1 user-91=jarvisin user-92=spectrum user-93=hodgesonweb user-94=theblack user-95=ulsukarm user-96=foundation user-97=booff user-98=markward user-99=athenare user-100=connect9 user-101=vantagep user-102=maflemin
Sep 22 02:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lbscrmod user-104=innovat1 user-105=askhform user-106=stuartge user-107=nativene user-108=skyfirec user-109=alexadmin user-110=bedfords user-111=ggaaorgu user-112=belle user-113=newstoda user-114=bemadonn user-115=brighto1 user-116=nstriton user-117=firstre2 user-118=vivienn1 user-119=battlere user-120=oneoarco user-121=accooper user-122=ianrayne user-123=connectedshoppin user-124=thqkgnbz user-125=gilpin user-126=milloyco user-127=elecleis user-128=hubmaster user-129=carsinyo user-130=fetch user-131=clarkass user-132=firstrel user-133=costestimatorco user-134=firstred user-135=southlon user-136=highlegh user-137=seftvta user-138=jonhartl user-139=ultbcrra user-140=firstres user-141=coursemc user-142=opaiscyx feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 02:09:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:41 nativespace-cdp sudo[761071]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:42 nativespace-cdp sudo[761078]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yLkAoBQM78FKoQ81.~
Sep 22 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:42 nativespace-cdp sudo[761081]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yLkAoBQM78FKoQ81.~'
Sep 22 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:42 nativespace-cdp sudo[761084]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-yLkAoBQM78FKoQ81.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:42 nativespace-cdp sudo[761088]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 02:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:42 nativespace-cdp sudo[761091]: pam_unix(sudo:session): session closed for user root
Sep 22 02:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 02:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 02:09:43 nativespace-cdp sudo[761111]: pam_unix(sudo:session): session closed for user root
Sep 22 02:11:34 nativespace-cdp sshd[761568]: Connection closed by 159.100.136.21 port 49462 [preauth]
Sep 22 02:16:33 nativespace-cdp sshd[762654]: Connection closed by 159.100.136.21 port 58368 [preauth]
Sep 22 02:21:33 nativespace-cdp sshd[763958]: Connection closed by 159.100.136.21 port 39182 [preauth]
Sep 22 02:26:33 nativespace-cdp sshd[764977]: Connection closed by 159.100.136.21 port 48746 [preauth]
Sep 22 02:31:33 nativespace-cdp sshd[766078]: Connection closed by 159.100.136.21 port 57512 [preauth]
Sep 22 02:36:34 nativespace-cdp sshd[767341]: Connection closed by 159.100.136.21 port 37580 [preauth]
Sep 22 02:41:33 nativespace-cdp sshd[768447]: Connection closed by 159.100.136.21 port 46980 [preauth]
Sep 22 02:46:33 nativespace-cdp sshd[769522]: Connection closed by 159.100.136.21 port 56706 [preauth]
Sep 22 02:51:36 nativespace-cdp sshd[770789]: Connection closed by 159.100.136.21 port 37424 [preauth]
Sep 22 02:56:34 nativespace-cdp sshd[771826]: Connection closed by 159.100.136.21 port 47326 [preauth]
Sep 22 03:01:33 nativespace-cdp sshd[773052]: Connection closed by 159.100.136.21 port 56042 [preauth]
Sep 22 03:06:33 nativespace-cdp sshd[774422]: Connection closed by 159.100.136.21 port 37744 [preauth]
Sep 22 03:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 03:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:25 nativespace-cdp sudo[775028]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 03:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:25 nativespace-cdp sudo[775031]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 03:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:25 nativespace-cdp sudo[775034]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 03:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:25 nativespace-cdp sudo[775039]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 03:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:26 nativespace-cdp sudo[775042]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:27 nativespace-cdp sudo[775051]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:27 nativespace-cdp sudo[775054]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:27 nativespace-cdp sudo[775057]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:27 nativespace-cdp sudo[775060]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:27 nativespace-cdp sudo[775063]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 03:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:27 nativespace-cdp sudo[775066]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 03:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:34 nativespace-cdp sudo[775099]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 03:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:34 nativespace-cdp sudo[775103]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=hhdugcor user-3=lbhyisi user-4=dickemery123 user-5=ptkxhsbt user-6=martsblo user-7=megacards user-8=musorguk user-9=wilsonsw user-10=strathar user-11=atestord user-12=sarafoundation user-13=lakesan1 user-14=brmrjxl user-15=stephani user-16=leereyn1 user-17=agproduc user-18=still user-19=spectrum user-20=hodgesonweb user-21=theblack user-22=jarvisin user-23=ulsukarm user-24=vantagep user-25=athenare user-26=connect9 user-27=lbscrmod user-28=maflemin user-29=booff user-30=markward user-31=foundation user-32=nativene user-33=innovat1 user-34=askhform user-35=stuartge user-36=skyfirec user-37=alexadmin user-38=newstoda user-39=belle user-40=ggaaorgu user-41=bemadonn user-42=bedfords user-43=vivienn1 user-44=firstre2 user-45=oneoarco user-46=battlere user-47=nstriton user-48=brighto1
Sep 22 03:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=connectedshoppin user-50=thqkgnbz user-51=accooper user-52=ianrayne user-53=hubmaster user-54=fetch user-55=carsinyo user-56=milloyco user-57=gilpin user-58=elecleis user-59=firstred user-60=highlegh user-61=southlon user-62=clarkass user-63=firstrel user-64=costestimatorco user-65=coursemc user-66=opaiscyx user-67=ultbcrra user-68=jonhartl user-69=seftvta user-70=firstres user-71=eugincou user-72=courseme user-73=hirefootballgame user-74=cwsocial user-75=paulmca1 user-76=howardon user-77=pugwash user-78=cambria1 user-79=cathski user-80=ninejimm user-81=reliable user-82=nomistakes user-83=hidden user-84=tigerlet user-85=barbersh user-86=smrszyqg user-87=isleofwi user-88=lkpier user-89=donnychicago user-90=firstre5 user-91=steakbridieme user-92=ctedorgu user-93=philmcph user-94=nscdp user-95=foods user-96=leftie user-97=health2045 user-98=fortunaz user-99=dhyana user-100=beauty user-101=darkstar
Sep 22 03:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eatspam user-103=nsceres user-104=fawcettd user-105=burydropin user-106=steve user-107=bwppodcast user-108=zebrapho user-109=asandcoc user-110=sibtoncc user-111=design user-112=dancinggardener user-113=stagingerris user-114=ladburyp user-115=kategilpin user-116=havantho user-117=sketchy user-118=cath user-119=nvihkvu user-120=tstardom user-121=oubpgvbx user-122=what user-123=bakery user-124=crrtipdl user-125=sosevalu user-126=boldover user-127=nove user-128=romaldki user-129=outdoorc user-130=ranxterc user-131=hodgsonmail user-132=branko user-133=onlycont user-134=lucy user-135=attlebor user-136=david user-137=nbhavers user-138=careers user-139=chrisdal user-140=mcdermos user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 03:09:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 03:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:34 nativespace-cdp sudo[775109]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:35 nativespace-cdp sudo[775115]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LetgRSlHGbxVGXF2.~
Sep 22 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:35 nativespace-cdp sudo[775118]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LetgRSlHGbxVGXF2.~'
Sep 22 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:35 nativespace-cdp sudo[775122]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LetgRSlHGbxVGXF2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:35 nativespace-cdp sudo[775126]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:35 nativespace-cdp sudo[775129]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 22 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:35 nativespace-cdp sudo[775132]: pam_unix(sudo:session): session closed for user root
Sep 22 03:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 03:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 03:09:37 nativespace-cdp sudo[775153]: pam_unix(sudo:session): session closed for user root
Sep 22 03:11:33 nativespace-cdp sshd[775650]: Connection closed by 159.100.136.21 port 47242 [preauth]
Sep 22 03:16:33 nativespace-cdp sshd[776765]: Connection closed by 159.100.136.21 port 57062 [preauth]
Sep 22 03:21:34 nativespace-cdp sshd[778103]: Connection closed by 159.100.136.21 port 38074 [preauth]
Sep 22 03:26:33 nativespace-cdp sshd[779142]: Connection closed by 159.100.136.21 port 47734 [preauth]
Sep 22 03:31:33 nativespace-cdp sshd[780276]: Connection closed by 159.100.136.21 port 56732 [preauth]
Sep 22 03:36:33 nativespace-cdp sshd[781601]: Connection closed by 159.100.136.21 port 37994 [preauth]
Sep 22 03:41:34 nativespace-cdp sshd[782922]: Connection closed by 159.100.136.21 port 46978 [preauth]
Sep 22 03:46:33 nativespace-cdp sshd[784635]: Connection closed by 159.100.136.21 port 56364 [preauth]
Sep 22 03:51:34 nativespace-cdp sshd[785895]: Connection closed by 159.100.136.21 port 37330 [preauth]
Sep 22 03:56:34 nativespace-cdp sshd[786850]: Connection closed by 159.100.136.21 port 46224 [preauth]
Sep 22 03:58:51 nativespace-cdp sshd[787215]: Invalid user tg from 54.36.102.184 port 36040
Sep 22 03:58:51 nativespace-cdp sshd[787215]: input_userauth_request: invalid user tg [preauth]
Sep 22 03:58:51 nativespace-cdp sshd[787215]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 03:58:51 nativespace-cdp sshd[787215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.102.184
Sep 22 03:58:54 nativespace-cdp sshd[787215]: Failed password for invalid user tg from 54.36.102.184 port 36040 ssh2
Sep 22 03:58:54 nativespace-cdp sshd[787215]: Received disconnect from 54.36.102.184 port 36040:11: Bye Bye [preauth]
Sep 22 03:58:54 nativespace-cdp sshd[787215]: Disconnected from 54.36.102.184 port 36040 [preauth]
Sep 22 03:59:09 nativespace-cdp sshd[787335]: Invalid user acer from 35.219.62.194 port 43390
Sep 22 03:59:09 nativespace-cdp sshd[787335]: input_userauth_request: invalid user acer [preauth]
Sep 22 03:59:09 nativespace-cdp sshd[787335]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 03:59:09 nativespace-cdp sshd[787335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.219.62.194
Sep 22 03:59:12 nativespace-cdp sshd[787335]: Failed password for invalid user acer from 35.219.62.194 port 43390 ssh2
Sep 22 03:59:12 nativespace-cdp sshd[787335]: Received disconnect from 35.219.62.194 port 43390:11: Bye Bye [preauth]
Sep 22 03:59:12 nativespace-cdp sshd[787335]: Disconnected from 35.219.62.194 port 43390 [preauth]
Sep 22 04:00:39 nativespace-cdp sshd[787803]: Invalid user ubuntu from 217.174.246.75 port 36102
Sep 22 04:00:39 nativespace-cdp sshd[787803]: input_userauth_request: invalid user ubuntu [preauth]
Sep 22 04:00:39 nativespace-cdp sshd[787803]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:00:39 nativespace-cdp sshd[787803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.174.246.75
Sep 22 04:00:41 nativespace-cdp sshd[787803]: Failed password for invalid user ubuntu from 217.174.246.75 port 36102 ssh2
Sep 22 04:00:42 nativespace-cdp sshd[787803]: Received disconnect from 217.174.246.75 port 36102:11: Bye Bye [preauth]
Sep 22 04:00:42 nativespace-cdp sshd[787803]: Disconnected from 217.174.246.75 port 36102 [preauth]
Sep 22 04:00:44 nativespace-cdp sshd[787794]: Received disconnect from 152.32.243.231 port 51488:11: Bye Bye [preauth]
Sep 22 04:00:44 nativespace-cdp sshd[787794]: Disconnected from 152.32.243.231 port 51488 [preauth]
Sep 22 04:00:58 nativespace-cdp sshd[787807]: Connection closed by 162.142.125.221 port 38292 [preauth]
Sep 22 04:01:33 nativespace-cdp sshd[787963]: Connection closed by 159.100.136.21 port 55322 [preauth]
Sep 22 04:04:47 nativespace-cdp sshd[788741]: Invalid user test from 54.36.102.184 port 50418
Sep 22 04:04:47 nativespace-cdp sshd[788741]: input_userauth_request: invalid user test [preauth]
Sep 22 04:04:47 nativespace-cdp sshd[788741]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:04:47 nativespace-cdp sshd[788741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.102.184
Sep 22 04:04:49 nativespace-cdp sshd[788741]: Failed password for invalid user test from 54.36.102.184 port 50418 ssh2
Sep 22 04:04:49 nativespace-cdp sshd[788741]: Received disconnect from 54.36.102.184 port 50418:11: Bye Bye [preauth]
Sep 22 04:04:49 nativespace-cdp sshd[788741]: Disconnected from 54.36.102.184 port 50418 [preauth]
Sep 22 04:05:10 nativespace-cdp sshd[788898]: Invalid user tomcat from 35.219.62.194 port 43138
Sep 22 04:05:10 nativespace-cdp sshd[788898]: input_userauth_request: invalid user tomcat [preauth]
Sep 22 04:05:10 nativespace-cdp sshd[788898]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:05:10 nativespace-cdp sshd[788898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.219.62.194
Sep 22 04:05:12 nativespace-cdp sshd[788898]: Failed password for invalid user tomcat from 35.219.62.194 port 43138 ssh2
Sep 22 04:05:12 nativespace-cdp sshd[788898]: Received disconnect from 35.219.62.194 port 43138:11: Bye Bye [preauth]
Sep 22 04:05:12 nativespace-cdp sshd[788898]: Disconnected from 35.219.62.194 port 43138 [preauth]
Sep 22 04:05:13 nativespace-cdp sshd[788973]: Invalid user sopuser from 217.174.246.75 port 34940
Sep 22 04:05:13 nativespace-cdp sshd[788973]: input_userauth_request: invalid user sopuser [preauth]
Sep 22 04:05:13 nativespace-cdp sshd[788973]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:05:13 nativespace-cdp sshd[788973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.174.246.75
Sep 22 04:05:15 nativespace-cdp sshd[788973]: Failed password for invalid user sopuser from 217.174.246.75 port 34940 ssh2
Sep 22 04:05:15 nativespace-cdp sshd[788973]: Received disconnect from 217.174.246.75 port 34940:11: Bye Bye [preauth]
Sep 22 04:05:15 nativespace-cdp sshd[788973]: Disconnected from 217.174.246.75 port 34940 [preauth]
Sep 22 04:05:28 nativespace-cdp sshd[789024]: Invalid user user from 54.36.102.184 port 60632
Sep 22 04:05:28 nativespace-cdp sshd[789024]: input_userauth_request: invalid user user [preauth]
Sep 22 04:05:28 nativespace-cdp sshd[789024]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:05:28 nativespace-cdp sshd[789024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.102.184
Sep 22 04:05:30 nativespace-cdp sshd[789024]: Failed password for invalid user user from 54.36.102.184 port 60632 ssh2
Sep 22 04:05:30 nativespace-cdp sshd[789024]: Received disconnect from 54.36.102.184 port 60632:11: Bye Bye [preauth]
Sep 22 04:05:30 nativespace-cdp sshd[789024]: Disconnected from 54.36.102.184 port 60632 [preauth]
Sep 22 04:05:53 nativespace-cdp sshd[789157]: Invalid user user from 217.174.246.75 port 46032
Sep 22 04:05:53 nativespace-cdp sshd[789157]: input_userauth_request: invalid user user [preauth]
Sep 22 04:05:53 nativespace-cdp sshd[789157]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:05:53 nativespace-cdp sshd[789157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.174.246.75
Sep 22 04:05:53 nativespace-cdp sshd[789154]: Invalid user username from 35.219.62.194 port 55716
Sep 22 04:05:53 nativespace-cdp sshd[789154]: input_userauth_request: invalid user username [preauth]
Sep 22 04:05:53 nativespace-cdp sshd[789154]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:05:53 nativespace-cdp sshd[789154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.219.62.194
Sep 22 04:05:55 nativespace-cdp sshd[789157]: Failed password for invalid user user from 217.174.246.75 port 46032 ssh2
Sep 22 04:05:55 nativespace-cdp sshd[789157]: Received disconnect from 217.174.246.75 port 46032:11: Bye Bye [preauth]
Sep 22 04:05:55 nativespace-cdp sshd[789157]: Disconnected from 217.174.246.75 port 46032 [preauth]
Sep 22 04:05:55 nativespace-cdp sshd[789154]: Failed password for invalid user username from 35.219.62.194 port 55716 ssh2
Sep 22 04:05:55 nativespace-cdp sshd[789154]: Received disconnect from 35.219.62.194 port 55716:11: Bye Bye [preauth]
Sep 22 04:05:55 nativespace-cdp sshd[789154]: Disconnected from 35.219.62.194 port 55716 [preauth]
Sep 22 04:06:33 nativespace-cdp sshd[789302]: Connection closed by 159.100.136.21 port 36902 [preauth]
Sep 22 04:07:45 nativespace-cdp sshd[789456]: Connection closed by 152.32.243.231 port 42158 [preauth]
Sep 22 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 22 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:29 nativespace-cdp sudo[789851]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 22 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:29 nativespace-cdp sudo[789854]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 22 04:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:30 nativespace-cdp sudo[789857]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 22 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:30 nativespace-cdp sudo[789865]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 22 04:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789869]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 22 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789878]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 22 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789881]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 22 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789884]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 22 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789887]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 22 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789890]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 22 04:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:34 nativespace-cdp sudo[789893]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 22 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:36 nativespace-cdp sudo[789907]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 22 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:36 nativespace-cdp sudo[789912]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stephani user-2=leereyn1 user-3=agproduc user-4=still user-5=spectrum user-6=hodgesonweb user-7=theblack user-8=jarvisin user-9=ulsukarm user-10=vantagep user-11=connect9 user-12=athenare user-13=lbscrmod user-14=maflemin user-15=booff user-16=foundation user-17=markward user-18=magichat user-19=hhdugcor user-20=lbhyisi user-21=dickemery123 user-22=ptkxhsbt user-23=martsblo user-24=megacards user-25=musorguk user-26=wilsonsw user-27=strathar user-28=atestord user-29=sarafoundation user-30=brmrjxl user-31=lakesan1 user-32=connectedshoppin user-33=thqkgnbz user-34=accooper user-35=ianrayne user-36=hubmaster user-37=fetch user-38=carsinyo user-39=milloyco user-40=gilpin user-41=elecleis user-42=firstred user-43=highlegh user-44=southlon user-45=clarkass user-46=firstrel user-47=costestimatorco
Sep 22 04:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=coursemc user-49=opaiscyx user-50=ultbcrra user-51=seftvta user-52=jonhartl user-53=firstres user-54=nativene user-55=innovat1 user-56=askhform user-57=stuartge user-58=alexadmin user-59=skyfirec user-60=newstoda user-61=belle user-62=ggaaorgu user-63=bemadonn user-64=bedfords user-65=vivienn1 user-66=firstre2 user-67=oneoarco user-68=battlere user-69=nstriton user-70=brighto1 user-71=dhyana user-72=beauty user-73=darkstar user-74=eatspam user-75=nsceres user-76=fawcettd user-77=burydropin user-78=steve user-79=bwppodcast user-80=zebrapho user-81=sibtoncc user-82=asandcoc user-83=eugincou user-84=courseme user-85=hirefootballgame user-86=cwsocial user-87=paulmca1 user-88=pugwash user-89=howardon user-90=cambria1 user-91=cathski user-92=ninejimm user-93=reliable user-94=nomistakes user-95=hidden user-96=tigerlet user-97=barbersh user-98=isleofwi user-99=smrszyqg user-100=lkpier user-101=steakbridieme
Sep 22 04:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=firstre5 user-103=donnychicago user-104=ctedorgu user-105=philmcph user-106=nscdp user-107=foods user-108=leftie user-109=fortunaz user-110=health2045 user-111=romaldki user-112=outdoorc user-113=ranxterc user-114=hodgsonmail user-115=branko user-116=onlycont user-117=lucy user-118=attlebor user-119=david user-120=nbhavers user-121=careers user-122=chrisdal user-123=mcdermos user-124=jennimil user-125=tomandle user-126=design user-127=stagingerris user-128=dancinggardener user-129=ladburyp user-130=kategilpin user-131=havantho user-132=cath user-133=sketchy user-134=nvihkvu user-135=oubpgvbx user-136=tstardom user-137=what user-138=bakery user-139=crrtipdl user-140=sosevalu user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 22 04:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 22 04:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:37 nativespace-cdp sudo[789919]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:38 nativespace-cdp sudo[789938]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c1IIqeEzjkN1iI7D.~
Sep 22 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:38 nativespace-cdp sudo[789941]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c1IIqeEzjkN1iI7D.~'
Sep 22 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:38 nativespace-cdp sudo[789944]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-c1IIqeEzjkN1iI7D.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 22 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:38 nativespace-cdp sudo[789948]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 22 04:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:38 nativespace-cdp sudo[789951]: pam_unix(sudo:session): session closed for user root
Sep 22 04:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 22 04:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 22 04:09:47 nativespace-cdp sudo[789996]: pam_unix(sudo:session): session closed for user root
Sep 22 04:10:59 nativespace-cdp sshd[790159]: Connection closed by 152.32.243.231 port 43722 [preauth]
Sep 22 04:11:33 nativespace-cdp sshd[790502]: Connection closed by 159.100.136.21 port 45416 [preauth]
Sep 22 04:12:37 nativespace-cdp sshd[790641]: Received disconnect from 152.32.243.231 port 45284:11: Bye Bye [preauth]
Sep 22 04:12:37 nativespace-cdp sshd[790641]: Disconnected from 152.32.243.231 port 45284 [preauth]
Sep 22 04:13:44 nativespace-cdp sshd[790813]: Invalid user abhishek from 152.32.243.231 port 60180
Sep 22 04:13:44 nativespace-cdp sshd[790813]: input_userauth_request: invalid user abhishek [preauth]
Sep 22 04:13:44 nativespace-cdp sshd[790813]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:13:44 nativespace-cdp sshd[790813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.243.231
Sep 22 04:13:46 nativespace-cdp sshd[790813]: Failed password for invalid user abhishek from 152.32.243.231 port 60180 ssh2
Sep 22 04:13:46 nativespace-cdp sshd[790813]: Received disconnect from 152.32.243.231 port 60180:11: Bye Bye [preauth]
Sep 22 04:13:46 nativespace-cdp sshd[790813]: Disconnected from 152.32.243.231 port 60180 [preauth]
Sep 22 04:15:02 nativespace-cdp sshd[791102]: Received disconnect from 152.32.243.231 port 46848:11: Bye Bye [preauth]
Sep 22 04:15:02 nativespace-cdp sshd[791102]: Disconnected from 152.32.243.231 port 46848 [preauth]
Sep 22 04:16:24 nativespace-cdp sshd[791470]: Connection closed by 152.32.243.231 port 33512 [preauth]
Sep 22 04:16:34 nativespace-cdp sshd[791533]: Connection closed by 159.100.136.21 port 54810 [preauth]
Sep 22 04:17:25 nativespace-cdp sshd[791808]: Connection closed by 152.32.243.231 port 48410 [preauth]
Sep 22 04:18:37 nativespace-cdp sshd[792077]: Connection closed by 152.32.243.231 port 35076 [preauth]
Sep 22 04:19:48 nativespace-cdp sshd[792354]: Connection closed by 152.32.243.231 port 49972 [preauth]
Sep 22 04:21:33 nativespace-cdp sshd[792892]: Connection closed by 159.100.136.21 port 35046 [preauth]
Sep 22 04:24:36 nativespace-cdp sshd[793858]: Invalid user test from 152.32.243.231 port 53102
Sep 22 04:24:36 nativespace-cdp sshd[793858]: input_userauth_request: invalid user test [preauth]
Sep 22 04:24:37 nativespace-cdp sshd[793858]: pam_unix(sshd:auth): check pass; user unknown
Sep 22 04:24:37 nativespace-cdp sshd[793858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.243.231
Sep 22 04:24:38 nativespace-cdp sshd[793858]: Failed password for invalid user test from 152.32.243.231 port 53102 ssh2
Sep 22 04:24:38 nativespace-cdp sshd[793858]: Received disconnect from 152.32.243.231 port 53102:11: Bye Bye [preauth]
Sep 22 04:24:38 nativespace-cdp sshd[793858]: Disconnected from 152.32.243.231 port 53102 [preauth]
Sep 22 04:25:49 nativespace-cdp sshd[794235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.243.231  user=root
Sep 22 04:25:49 nativespace-cdp sshd[794235]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 22 04:25:50 nativespace-cdp sshd[794235]: Failed password for root from 152.32.243.231 port 39770 ssh2
Sep 22 04:25:51 nativespace-cdp sshd[794235]: Received disconnect from 152.32.243.231 port 39770:11: Bye Bye [preauth]
Sep 22 04:25:51 nativespace-cdp sshd[794235]: Disconnected from 152.32.243.231 port 39770 [preauth]
Sep 22 04:26:33 nativespace-cdp sshd[794408]: Connection closed by 159.100.136.21 port 43966 [preauth]
